Hacking Types

🦠 Malware-Based Attacks

Keywords: infect, spread, disguise, demand, spy, log, hide  

- Virus (infect file): Attaches to files and spreads when opened — like a tainted Word doc.  

- Worm (spread network): Self-replicates across systems — clogs bandwidth.  

- Trojan Horse (disguise legit): Pretends to be useful software — opens a backdoor.  

- Ransomware (demand payment): Encrypts files and demands money — often in crypto.  

- Spyware (spy silently): Monitors user activity — steals browsing data.  

- Keylogger (log keystrokes): Records everything typed — captures passwords.  

- Rootkit (hide deeply): Burrows into the OS — hides attacker’s presence.

---

🌐 Network-Based Attacks

Keywords: intercept, steal, redirect, impersonate, flood, infect site  

- Man-in-the-Middle (MitM) (intercept traffic): Eavesdrops on communication — steals credentials.  

- Session Hijacking (steal session): Takes over a user’s active session — impersonates them.  

- DNS Poisoning (redirect domain): Sends users to fake websites — alters DNS records.  

- ARP Spoofing (impersonate MAC): Tricks devices into sending data to attacker — LAN-based.  

- DoS/DDoS (flood system): Overloads servers with traffic — causes downtime.  

- Watering Hole Attack (infect trusted site): Compromises a site frequented by targets — infects visitors silently.

---

🧬 Web Application Attacks

Keywords: inject, script, trick, traverse  

- SQL Injection (inject query): Inserts malicious SQL — exposes or manipulates databases.  

- Cross-Site Scripting (XSS) (script steal): Injects JavaScript — steals cookies or session data.  

- Cross-Site Request Forgery (CSRF) (trick action): Tricks logged-in users into unintended actions.  

- Directory Traversal (traverse path): Accesses restricted files — manipulates file paths.

---

🔓 Privilege Escalation

Keywords: climb, cross  

- Vertical Escalation (climb access): Gains higher privileges — user becomes admin.  

- Horizontal Escalation (cross account): Accesses peer-level accounts — user A sees user B’s data.

---

🧍 Physical & Wireless Attacks

Keywords: trash, peek, fake, bait  

- Dumpster Diving (trash info): Searches discarded items — finds sensitive data.  

- Shoulder Surfing (peek password): Watches someone enter credentials — at ATMs or workstations.  

- Evil Twin (fake Wi-Fi): Sets up rogue hotspot — captures user traffic.  

- USB Drop Attack (bait device): Leaves infected USBs — curious users plug them in.