credential

Identity and Access

Anything an actor presents to prove an identity: a password, a key file, a certificate, a fingerprint. Whoever holds a credential is treated as the person it belongs to, so a stolen one is as good as the real thing.

Related terms

password

authentication

token

Appears in(114)

Text Processing: grep, awk, sedLinux for Security
HTTP Methods and Status CodesBackends and APIs
Port Scanning Deep DiveRecon and Scanning
Authentication and API SecurityBackends and APIs
Subdomain and Content EnumerationRecon and Scanning
tcpdump FundamentalsTraffic Analysis
Dissecting Traffic in WiresharkTraffic Analysis
HTTP vs HTTPS vs VPNTraffic Analysis
HTTP FundamentalsWeb and HTTP
Cookies, Sessions, and AuthWeb and HTTP
The OWASP Top 10Web and HTTP
Threat Modeling Your LifeDigital Self-Defense
Passwords and AuthenticationDigital Self-Defense
Spotting Scams and PhishingDigital Self-Defense
IDOR and SSRFVulnerabilities and Exploitation
Your Privacy ToolkitDigital Self-Defense
Approaching a TargetCTF Methodology
From Enumeration to FootholdCTF Methodology
Hashing and IntegrityCryptography
How Passwords Are StoredPassword Attacks
Wordlists and RulesPassword Attacks
Enumerating Active DirectoryActive Directory
Common AD AttacksActive Directory
The Human Attack SurfaceSocial Engineering
Phishing and PretextingSocial Engineering
Defending PeopleSocial Engineering
Windows Architecture and ProcessesWindows Fundamentals
Windows Permissions and PrivilegesWindows Fundamentals
PowerShell for SecurityWindows Fundamentals
Windows Event LogsWindows Fundamentals
Windows Networking and SMBWindows Fundamentals
Talking HTTP with PythonPython for Security
SQL InjectionWeb Application Attacks
Command InjectionWeb Application Attacks
Server-Side Request ForgeryWeb Application Attacks
Insecure DeserializationWeb Application Attacks
Attacking AuthenticationWeb Application Attacks
Access Control and IDORWeb Application Attacks
Repeater and IntruderBurp Suite
A Real Testing WorkflowBurp Suite
Metasploit FundamentalsThe Metasploit Framework
MeterpreterThe Metasploit Framework
Post-ExploitationThe Metasploit Framework
A Repeatable Privesc MethodLinux Privilege Escalation
A Repeatable Windows Privesc MethodWindows Privilege Escalation
Token ImpersonationWindows Privilege Escalation
Dangerous Privileges and InstallersWindows Privilege Escalation
Hunting for CredentialsWindows Privilege Escalation
Evil Twin and Rogue APsWireless Security
Profiling PeopleOpen Source Intelligence
Google DorkingOpen Source Intelligence
Network ForensicsDigital Forensics
The Incident Response LifecycleIncident Response
Detection and TriageIncident Response
Containment, Eradication, RecoveryIncident Response
Writing the Incident ReportIncident Response
The MITRE ATT&CK FrameworkSOC Analyst Fundamentals
Escalation and HandoffSOC Analyst Fundamentals
What a SIEM DoesSIEM and Log Analysis
Writing Detection QueriesSIEM and Log Analysis
The Hunting MindsetThreat Hunting
Hunting in LogsThreat Hunting
Indicators vs BehaviorsThreat Hunting
VPNs and Zero TrustNetwork Defense
Detecting Lateral MovementNetwork Defense
Identity in the CloudCloud Security Fundamentals
Common Cloud MisconfigurationsCloud Security Fundamentals
Storage ExposureCloud Security Fundamentals
Logging and MonitoringCloud Security Fundamentals
AWS Building Blocks for SecurityAWS Security
AWS IAM in DepthAWS Security
S3 SecurityAWS Security
Enumerating AWS With KeysAWS Security
Detection in AWSAWS Security
Kubernetes ArchitectureKubernetes Security
Pods, Services, and RBACKubernetes Security
Common Cluster MisconfigurationsKubernetes Security
Attacking a ClusterKubernetes Security
The OWASP API Top 10API Security
API Authentication FlawsAPI Security
Testing an APIAPI Security
What GRC Actually IsGovernance, Risk, and Compliance
IOCs and TTPsCyber Threat Intelligence
Writing Good DetectionsDetection Engineering
Testing and Tuning DetectionsDetection Engineering
Managing SecretsSecure Coding
iOS App InternalsMobile Application Security
Common Mobile VulnerabilitiesMobile Application Security
Firmware BasicsIoT and OT Security
Common IoT WeaknessesIoT and OT Security
Defending Connected DevicesIoT and OT Security
Attacking Weak HashingCryptographic Attacks
Stocking It With TargetsBuilding a Home Lab
Snapshots and Safe HabitsBuilding a Home Lab
Data Flow DiagramsThreat Modeling
Threat Modeling a Real AppThreat Modeling
Writing a FindingWriting Security Reports
Scanning and Authenticated ScansVulnerability Management
Metrics That MatterVulnerability Management
Authentication vs AuthorizationIdentity and Access Management
MFA Done RightIdentity and Access Management
Privileged Access ManagementIdentity and Access Management
The Identity LifecycleIdentity and Access Management
The Pillars of Zero TrustZero Trust Architecture
Identity as the PerimeterZero Trust Architecture
Why Email Is a TargetEmail Security
Phishing Defense in DepthEmail Security
Investigating a PhishEmail Security
DHCP and NTP RisksDNS and Network Services Security
The Supply Chain Attack SurfaceSoftware Supply Chain Security
Dependency RiskSoftware Supply Chain Security
Securing CI/CDSoftware Supply Chain Security
Key ManagementData Protection and Privacy
Data Loss PreventionData Protection and Privacy