359 साइबर सुरक्षा शर्तें: हमले CVEs उपकरण प्रोटोकॉल अवधारणाएँ संक्षिप्त और पूर्ण परिभाषाएँ उदाहरण संबंधित शर्तें कौशल स्तर JSON
पोस्टमैन में चलाएँ
{
"total": 359,
"categories": [
{
"category": "Attack",
"count": 74
},
{
"category": "Concept",
"count": 53
},
{
"category": "Protocol",
"count": 45
},
{
"category": "Tool",
"count": 41
},
{
"category": "Methodology",
"count": 40
},
{
"category": "Defense",
"count": 23
},
{
"category": "Certification",
"count": 19
},
{
"category": "Vulnerability",
"count": 17
},
{
"category": "Networking",
"count": 16
},
{
"category": "Role",
"count": 10
},
{
"category": "Slang",
"count": 6
},
{
"category": "Principles",
"count": 5
},
{
"category": "ICS",
"count": 4
},
{
"category": "AI/ML Security",
"count": 3
},
{
"category": "Hardware",
"count": 3
}
],
"skillLevels": [
{
"skill_level": "Intermediate",
"count": 183
},
{
"skill_level": "Advanced",
"count": 122
},
{
"skill_level": "Beginner",
"count": 54
}
]
}
curl --location --request GET 'https://zylalabs.com/api/14093/cyberdict+-+cybersecurity+glossary+api/34798/getstats' --header 'Authorization: Bearer YOUR_API_KEY'
{
"terms": [
{
"id": 362,
"term": "1337 (Leet)",
"short_description": "Alternative alphabet using symbols and numbers to replace letters, popular in hacker culture.",
"full_description": "1337 (pronounced \"leet\"), derived from \"elite\" is a type of internet slang where standard letters are replaced with various combinations of ASCII characters, numbers, and symbols. It originated in 1980s bulletin board systems and early hacker culture as a way to obfuscate text and demonstrate technical prowess. The simplest form replaces letters with similar-looking numbers (E=3, A=4, T=7, etc.), while more complex versions use creative substitutions. While less common in professional contexts today, elements of leet speak remain in technical culture, gaming communities, and as a way to bypass simple text filters.",
"category": "Slang",
"related_terms": "[\"Hacker Culture\",\"ASCII Art\",\"Obfuscation\",\"Internet Slang\",\"Text Substitution\"]",
"examples": "[\"Converting \\\"Hacker\\\" to \\\"H4ck3r\\\" or more extremely to \\\"|\\\\|4(|<3|2\\\"\",\"Using \\\"pwn\\\" (derived from \\\"own\\\" as \\\"p\\\" resembles \\\"o\\\" in some fonts) to indicate domination or compromise\",\"Creating passwords with leet substitutions (though predictable substitutions are vulnerable to rule-based cracking)\",\"Online handles and group names incorporating leet speak like \\\"Th3 R34l D34l\\\"\"]",
"skill_level": "Beginner"
},
{
"id": 361,
"term": "2FA (Two-Factor Authentication)",
"short_description": "Two-Factor Authentication - adds an extra verification layer beyond passwords",
"full_description": "Two-Factor Authentication (2FA) is a security method that requires users to provide two different authentication factors to verify themselves. This provides a higher level of security than single-factor authentication (like a password alone) because even if one factor is compromised, the second factor would still prevent unauthorized access. The factors typically come from different categories: something you know (password), something you have (security token or mobile device), or something you are (biometrics). Common implementations include sending a code via SMS, using an authenticator app to generate time-based one-time passwords (TOTP), or using hardware security keys.",
"category": "Defense",
"related_terms": "[\"MFA\",\"OTP\",\"TOTP\",\"Authentication\",\"Hardware Token\"]",
"examples": "[\"Using Google Authenticator to generate a verification code after entering a password\",\"Receiving a one-time code via SMS when logging into a banking website\",\"Plugging in a YubiKey hardware token to complete the login process\"]",
"skill_level": "Beginner"
},
{
"id": 360,
"term": "Actions on Objectives",
"short_description": "The final phase where attackers accomplish their goals in the target environment.",
"full_description": "Actions on Objectives is the final phase of the Cyber Kill Chain, where attackers accomplish their ultimate goals after establishing presence in the target environment. These objectives vary based on the attacker's motivations and might include data exfiltration, system or data destruction, ransomware deployment, espionage, or using the compromised system as a launching point for further attacks. This phase represents the culmination of the attack and often causes the most direct harm to the victim organization.",
"category": "Methodology",
"related_terms": "[\"Cyber Kill Chain\",\"Data Exfiltration\",\"Ransomware\",\"Espionage\",\"Destruction\"]",
"examples": "[\"Exfiltrating sensitive intellectual property to an attacker-controlled server\",\"Deploying ransomware across the network to encrypt critical business data\",\"Establishing persistence within critical infrastructure to enable future sabotage\"]",
"skill_level": "Intermediate"
},
{
"id": 359,
"term": "AdminSDHolder",
"short_description": "Active Directory protection mechanism that can be abused for persistence",
"full_description": "AdminSDHolder is a special object in Active Directory designed to protect privileged accounts from unauthorized modifications by enforcing a specific security descriptor. Every 60 minutes, a background process (SDProp) copies the AdminSDHolder's access control list to all protected accounts and groups. While this is a security feature, attackers can abuse it for persistence by modifying the AdminSDHolder object itself to grant themselves persistent access to all privileged accounts. Since these changes are continuously reapplied by the system, traditional remediation approaches may fail to remove the attacker's access.",
"category": "Vulnerability",
"related_terms": "[\"Active Directory\",\"Access Control List\",\"SDProp\",\"Protected Groups\",\"Persistence\",\"Security Descriptor\"]",
"examples": "[\"Adding a backdoor user to AdminSDHolder's ACL for persistent admin access\",\"Maintaining persistence that survives regular cleanup attempts\",\"Hiding access rights that propagate to all protected accounts\"]",
"skill_level": "Advanced"
},
{
"id": 358,
"term": "AdminSDHolder Abuse",
"short_description": "Exploiting the protected group mechanism in Active Directory to maintain persistent privileged access.",
"full_description": "AdminSDHolder abuse is a sophisticated persistence technique in Active Directory environments that exploits the AdminSDHolder object and Security Descriptor propagation mechanism. The AdminSDHolder object in Active Directory contains a security descriptor that is applied to protected groups (like Domain Admins) every 60 minutes by the SDProp process. By modifying the ACLs on the AdminSDHolder object, attackers can grant themselves persistent rights to all protected accounts and groups, even if direct permissions on those objects are later removed. This technique is particularly stealthy because it leverages a legitimate AD protection mechanism and the changes persist through regular security measures like password resets.",
"category": "Attack",
"related_terms": "[\"Active Directory\",\"Persistence\",\"ACL\",\"Protected Groups\",\"SDProp\"]",
"examples": "[\"Adding a 'Full Control' ACE for a backdoor account to the AdminSDHolder object\",\"Granting 'GenericAll' rights to maintain the ability to reset passwords of privileged accounts\",\"Using DCSync rights on AdminSDHolder to maintain the ability to extract password hashes\"]",
"skill_level": "Advanced"
},
{
"id": 357,
"term": "Admission Controller",
"short_description": "Kubernetes components intercepting requests to validate and mutate resources",
"full_description": "Admission Controllers in Kubernetes are plugins that intercept API requests to create, modify, or delete resources before they are persisted. These controllers serve two primary functions: validating requests against custom security policies, and mutating requests to enforce security controls or inject configuration. Security-focused admission controllers can enforce pod security standards, prevent privileged containers, implement network policies, and validate image sources. Tools like OPA Gatekeeper and Kyverno provide customizable policy enforcement through admission control.",
"category": "Defense",
"related_terms": "[\"Kubernetes\",\"Container Security\",\"Policy Enforcement\",\"Security Controls\",\"OPA\",\"Webhook\"]",
"examples": "[\"PodSecurityPolicy enforcing container security standards\",\"OPA Gatekeeper validating resource configurations against policies\",\"MutatingAdmissionWebhook injecting security sidecars automatically\"]",
"skill_level": "Advanced"
},
{
"id": 356,
"term": "Adversarial Example (AI/ML)",
"short_description": "Inputs to machine learning models intentionally designed to cause the model to make a mistake.",
"full_description": "An adversarial example in machine learning is an input that has been slightly modified in a way that is imperceptible to humans but causes a machine learning model (e.g., an image classifier, a spam filter) to misclassify it with high confidence. These attacks highlight vulnerabilities in ML models. Creating effective adversarial examples often requires knowledge of the model's architecture or access to query the model. Defending against them is an active area of research.",
"category": "AI/ML Security",
"related_terms": "[\"Machine Learning Security\",\"Data Poisoning\",\"Model Evasion\",\"AI Security\"]",
"examples": "[\"Adding a small, almost invisible noise pattern to an image of a panda, causing an image recognition model to classify it as a gibbon.\",\"Slightly altering a spam email to bypass a machine learning-based spam filter.\",\"Crafting audio commands that are unintelligible to humans but recognized by voice assistants.\"]",
"skill_level": "Advanced"
},
{
"id": 355,
"term": "AES (Advanced Encryption Standard)",
"short_description": "A symmetric block cipher widely adopted by the U.S. government and used worldwide."
}
],
"_note": "Response truncated for documentation purposes"
}
curl --location --request GET 'https://zylalabs.com/api/14093/cyberdict+-+cybersecurity+glossary+api/34799/listterms' --header 'Authorization: Bearer YOUR_API_KEY'
साइन अप करने के बाद, प्रत्येक डेवलपर को एक पर्सनल API एक्सेस की असाइन की जाती है, जो अक्षरों और अंकों का एक यूनिक संयोजन होता है, जिसका उपयोग हमारे API एंडपॉइंट तक पहुंचने के लिए किया जाता है। प्रमाणीकरण के लिए साइबरडिक्ट - साइबर सुरक्षा शब्दावली API के साथ बस अपने बेयरर टोकन को Authorization हेडर में शामिल करें।
| हेडर | विवरण |
|---|---|
Authorization
|
आवश्यक
होना चाहिए Bearer access_key. जब आप सब्सक्राइब हों तो ऊपर "Your API Access Key" देखें।
|
कोई लंबी अवधि की प्रतिबद्धता नहीं। कभी भी अपग्रेड, डाउनग्रेड या कैंसल करें। फ्री ट्रायल में 50 रिक्वेस्ट तक शामिल हैं।
359 साइबर सुरक्षा शब्द: हमले सीवीई उपकरण प्रोटोकॉल अवधारणाएँ संक्षिप्त और पूर्ण परिभाषाएँ उदाहरण संबंधित शब्द कौशल स्तर JSON
CyberDict 359 साइबर सुरक्षा की शर्तें प्रदान करता है जिनमें नाम संक्षिप्त और पूर्ण परिभाषाएँ उदाहरण संबंधित शर्तें श्रेणियाँ और कौशल स्तर शामिल हैं शर्तें एंडपॉइंट पाठ खोज श्रेणी और कौशल स्तर फ़िल्टर संख्या आईडी और पृष्ठभूमि का समर्थन करती हैं आंकड़े एंडपॉइंट कुल और गणनाएँ लौटाता है इसका उपयोग प्रशिक्षण क्विज़ टूलटिप्स चैटबॉट और SOC ऑनबोर्डिंग के लिए करें सामग्री शिक्षा और रक्षा सुरक्षा के लिए जैसी है प्रदान की जाती है कोई वारंटी प्रदान नहीं की जाती प्राथमिक स्रोतों के खिलाफ सुरक्षा महत्वपूर्ण जानकारी की पुष्टि करें कच्चे डेटा सेट को प्रतिस्पर्धी शब्दकोष के रूप में पुनर्विक्रय न करें
सूचीशर्तें अंत बिंदु का उपयोग करें। वैकल्पिक क्यू पैरामीटर शर्तों की खोज करता है। श्रेणी और कौशल स्तर पैरामीटर परिणामों को संकुचन करते हैं। सभी फ़िल्टर AND के साथ संयोजित होते हैं। एकल शर्त पुनर्प्राप्त करने के लिए आईडी का उपयोग करें
सीमा का उपयोग करें यह निर्धारित करने के लिए कि कितने मेल खाते हुए शर्तें लौटाई जाएँगी और ऑफसेट का उपयोग करें मेल खाते हुए शर्तों को छोड़ने के लिए दोनों पैरामीटर वैकल्पिक हैं शर्तें वर्णानुक्रम में अनुक्रमित होती हैं
प्रत्येक पद में एक पद नाम, संक्षिप्त परिभाषा, पूर्ण विवरण, उदाहरण, संबंधित पद, श्रेणी और कौशल स्तर शामिल होते हैं कौशल स्तर مبتدی, मध्यवर्ती और उन्नत होते हैं संबंधित पद लिंक किए गए शब्दकोशों और ज्ञान ग्राफ का समर्थन करते हैं
GetStats अंत बिंदु श्रेणी और कौशल स्तर द्वारा कुल शर्तों और गणनाओं की संख्या लौटाता है वर्तमान डेटा सेट में 359 शर्तें हैं प्रतिक्रियाएँ JSON हैं और Cloudflare एज से प्रदान की जाती हैं
