Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint does not enforce ownership or privilege checks when a low-privileged authenticated user queries session information in deployments using stateful session storage. A requester who knows a target identity identifier can retrieve another user's active session credentials, including credentials for a more privileged account, and use them to hijack that session. This issue is fixed in version 16.1.1.
Casky was already ahead
This CVE exploits attack patterns that Casky's 514matched skills already investigate — long before this vulnerability was disclosed. Claude's reasoning model maps these techniques to MITRE ATT&CK, so practitioners who ran these skills have already seen the threat behaviour in their findings.
OpenAM versions prior to 16.1.1 suffer from a critical session management vulnerability where the SessionRequestHandler fails to properly validate user privileges when accessing session information in stateful deployments. This allows authenticated users with low privileges to query and retrieve active session credentials belonging to other users—potentially including highly privileged accounts. Organizations relying on OpenAM for identity and access management are directly impacted, as attackers can escalate privileges, maintain persistent access, and operate under the context of compromised administrative accounts without triggering typical authentication logs.
Casky's 514 matched skills leverage Claude AI with extended reasoning to detect the attack patterns mapped to MITRE ATT&CK techniques TA0043 (Reconnaissance), TA0009 (Collection), TA0004 (Privilege Escalation), and TA0006 (Credential Access). Practitioners using Casky would observe findings highlighting: (1) suspicious session enumeration queries targeting multiple user identities (TA0009 Collection), (2) attempts to access session stores without corresponding privilege validation logs, (3) lateral movement indicators where a low-privileged account suddenly assumes high-privileged session context (TA0004), and (4) credential material being extracted from session management endpoints (TA0006). The platform's skills would flag deviations from expected access control patterns—such as users querying sessions outside their administrative scope—enabling detection before session hijacking leads to full account takeover.
Composite risk scoring from EPSS, CISA KEV, Shodan, and GreyNoise — 21 security APIs correlated into a single Casky Risk Score. Coming in Casky Pro. Join early access →
These skills use Claude AI's reasoning model to surface findings in the same attack categories as CVE-2026-45048.
Casky has 514 skills that investigate the attack patterns behind CVE-2026-45048. Run one and get CVSS-scored findings in 3 minutes.
Run the skill that detects this →Access with Stolen Session Cookie
cryptography · low
Access with Stolen Session Cookie
identity access management · low
Access with Stolen Session Cookie
penetration testing · medium
Account Access Removal
cloud security · low
Account Manipulation
cloud security · low
Account Manipulation
identity access management · low
Account Manipulation
identity access management · low
Account Manipulation: Account Linking
cloud security · low
Account Manipulation: Add Authorized User
identity access management · low
Account Manipulation: Change Account Details
cloud security · low
Account Manipulation: Change of Payment Details
phishing defense · medium
Account Manipulation: Enable Account Features
identity access management · low
Account Manipulation: Enable Account Features
identity access management · low
Account Takeover
identity access management · low
Account Takeover
red teaming · high
Account Takeover
red teaming · high
Account Takeover
identity access management · low
Account Takeover
phishing defense · medium
Account Takeover
identity access management · low
Account Takeover: Exposed API Key
digital forensics · low
Account Takeover: Exposed Login Credential
identity access management · low
Account Takeover: Exposed Login Credential
identity access management · low
Account Takeover: Exposed Login Credential
threat hunting · low
Account Takeover: Exposed Login Credential
red teaming · high
Account Takeover: Exposed Login Credential
identity access management · low
Account Takeover: Exposed Login Credential
phishing defense · medium
Account Takeover: Password Reset
identity access management · low
achieving-cmmc-level-2-compliance
compliance governance · low
acquiring-disk-image-with-dd-and-dcfldd
digital forensics · low
Adversary-in-the-Middle
identity access management · low
analyzing-apt-group-with-mitre-navigator
threat intelligence · low
analyzing-browser-forensics-with-hindsight
digital forensics · low
analyzing-campaign-attribution-evidence
threat intelligence · low
analyzing-cloud-storage-access-patterns
cloud security · low
analyzing-cyber-kill-chain
threat intelligence · low
analyzing-disk-image-with-autopsy
digital forensics · low
analyzing-docker-container-forensics
digital forensics · low
analyzing-kubernetes-audit-logs
container security · low
analyzing-linux-kernel-rootkits
digital forensics · low
analyzing-linux-system-artifacts
digital forensics · low
analyzing-lnk-file-and-jump-list-artifacts
digital forensics · low
analyzing-malicious-url-with-urlscan
phishing defense · medium
analyzing-malware-family-relationships-with-malpedia
threat intelligence · low
analyzing-mft-for-deleted-file-recovery
digital forensics · low
analyzing-office365-audit-logs-for-compromise
cloud security · low
analyzing-outlook-pst-for-email-forensics
digital forensics · low
analyzing-persistence-mechanisms-in-linux
threat hunting · low
analyzing-powershell-empire-artifacts
threat hunting · low
analyzing-prefetch-files-for-execution-history
digital forensics · low
analyzing-slack-space-and-file-system-artifacts
digital forensics · low
analyzing-threat-actor-ttps-with-mitre-attack
threat intelligence · low
analyzing-threat-actor-ttps-with-mitre-navigator
threat intelligence · low
analyzing-threat-intelligence-feeds
threat intelligence · low
analyzing-threat-landscape-with-misp
threat intelligence · low
analyzing-usb-device-connection-history
digital forensics · low
analyzing-windows-amcache-artifacts
digital forensics · low
analyzing-windows-lnk-files-for-artifacts
digital forensics · low
analyzing-windows-prefetch-with-python
digital forensics · low
analyzing-windows-registry-for-artifacts
digital forensics · low
analyzing-windows-shellbag-artifacts
digital forensics · low
attacking-entra-id-with-roadtools
identity access management · low
attacking-oauth-with-device-code-phishing
identity access management · low
auditing-aws-s3-bucket-permissions
cloud security · low
auditing-azure-active-directory-configuration
cloud security · low
auditing-cloud-with-cis-benchmarks
cloud security · low
auditing-entra-id-with-aadinternals
identity access management · low
auditing-gcp-iam-permissions
cloud security · low
auditing-kubernetes-rbac-privilege-escalation
container security · low
auditing-terraform-infrastructure-for-security
cloud security · low
auditing-tls-certificate-transparency-logs
threat intelligence · low
automating-ioc-enrichment
threat intelligence · low
benchmarking-kubernetes-with-kube-bench
container security · low
Browser Session Hijacking
cloud security · low
Brute Force: Credential Stuffing
threat intelligence · low
building-adversary-infrastructure-tracking-system
threat intelligence · low
building-attack-pattern-library-from-cti-reports
threat intelligence · low
building-c2-infrastructure-with-sliver-framework
red teaming · high
building-c2-redirector-infrastructure
red teaming · high
building-cloud-siem-with-sentinel
cloud security · low
building-ioc-defanging-and-sharing-pipeline
threat intelligence · low
building-ioc-enrichment-pipeline-with-opencti
threat intelligence · low
building-red-team-c2-infrastructure-with-havoc
red teaming · high
building-role-mining-for-rbac-optimization
identity access management · low
building-super-timelines-with-plaso
digital forensics · low
building-threat-actor-profile-from-osint
threat intelligence · low
building-threat-feed-aggregation-with-misp
threat intelligence · low
building-threat-hunt-hypothesis-framework
threat hunting · low
building-threat-intelligence-platform
threat intelligence · low
bypassing-authentication-with-forced-browsing
web application security · medium
coercing-authentication-with-coercer-petitpotam
red teaming · high
collecting-open-source-intelligence
threat intelligence · low
collecting-threat-intelligence-with-misp
threat intelligence · low
conducting-api-security-testing
penetration testing · medium
conducting-cloud-penetration-testing
cloud security · low
conducting-cyber-risk-assessment-with-nist-800-30
compliance governance · low
conducting-domain-persistence-with-dcsync
red teaming · high
conducting-external-reconnaissance-with-osint
penetration testing · medium
conducting-full-scope-red-team-engagement
red teaming · high
conducting-gdpr-compliance-assessment
compliance governance · low
conducting-internal-network-penetration-test
penetration testing · medium
conducting-internal-reconnaissance-with-bloodhound-ce
red teaming · high
conducting-mobile-app-penetration-test
penetration testing · medium
conducting-network-penetration-test
penetration testing · medium
conducting-pass-the-ticket-attack
red teaming · high
conducting-wireless-network-penetration-test
penetration testing · medium
configuring-active-directory-tiered-model
identity access management · low
configuring-aws-verified-access-for-ztna
zero trust architecture · low
configuring-certificate-authority-with-openssl
cryptography · low
configuring-host-based-intrusion-detection
endpoint security · low
configuring-hsm-for-key-storage
cryptography · low
configuring-microsegmentation-for-zero-trust
zero trust architecture · low
configuring-multi-factor-authentication-with-duo
identity access management · low
configuring-tls-1-3-for-secure-communications
cryptography · low
configuring-windows-defender-advanced-settings
endpoint security · low
configuring-windows-event-logging-for-detection
endpoint security · low
configuring-zscaler-private-access-for-ztna
zero trust architecture · low
Conversion to Physical Monetary Instruments: Cash
digital forensics · low
Convert to Cryptocurrency
cloud security · low
correlating-threat-campaigns
threat intelligence · low
Create Fake Materials: Fake Website
phishing defense · medium
Create Fake Materials: Fake Website
threat hunting · low
Create Fake Materials: Fake Website
threat intelligence · low
Create Fake Materials: Fake Website
phishing defense · medium
Create Fake Materials: Fake Website
phishing defense · medium
Create Fake Materials: Fake Website
digital forensics · low
Create Fake Materials: Fake Website
phishing defense · medium
Create Fake Materials: Fake Website
penetration testing · medium
Delete Relevant Emails
phishing defense · medium
deploying-cloudflare-access-for-zero-trust
zero trust architecture · low
deploying-edr-agent-with-crowdstrike
endpoint security · low
deploying-osquery-for-endpoint-monitoring
endpoint security · low
deploying-palo-alto-prisma-access-zero-trust
zero trust architecture · low
deploying-software-defined-perimeter
zero trust architecture · low
deploying-tailscale-for-zero-trust-vpn
zero trust architecture · low
detecting-anomalies-in-industrial-control-systems
ot ics security · medium
detecting-api-enumeration-attacks
api security · medium
detecting-attacks-on-historian-servers
ot ics security · medium
detecting-attacks-on-scada-systems
ot ics security · medium
detecting-aws-guardduty-findings-automation
cloud security · low
detecting-aws-iam-privilege-escalation
cloud security · low
detecting-azure-lateral-movement
cloud security · low
detecting-azure-service-principal-abuse
cloud security · low
detecting-azure-storage-account-misconfigurations
cloud security · low
detecting-broken-object-property-level-authorization
api security · medium
detecting-cloud-threats-with-guardduty
cloud security · low
detecting-container-drift-at-runtime
container security · low
detecting-container-escape-attempts
container security · low
detecting-container-escape-with-falco-rules
container security · low
detecting-container-runtime-threats-with-falco
container security · low
detecting-dcsync-attack-in-active-directory
threat hunting · low
detecting-dll-sideloading-attacks
threat hunting · low
detecting-dnp3-protocol-anomalies
ot ics security · medium
detecting-email-forwarding-rules-attack
threat hunting · low
detecting-evasion-techniques-in-endpoint-logs
endpoint security · low
detecting-fileless-attacks-on-endpoints
endpoint security · low
detecting-golden-ticket-attacks-in-kerberos-logs
threat hunting · low
detecting-insider-threat-behaviors
threat hunting · low
detecting-kerberoasting-attacks
threat hunting · low
detecting-lateral-movement-with-splunk
threat hunting · low
detecting-malicious-scheduled-tasks-with-sysmon
threat hunting · low
detecting-mimikatz-execution-patterns
threat hunting · low
detecting-misconfigured-azure-storage
cloud security · low
detecting-modbus-command-injection-attacks
ot ics security · medium
detecting-modbus-protocol-anomalies
ot ics security · medium
detecting-ntlm-relay-with-event-correlation
threat hunting · low
detecting-pass-the-hash-attacks
threat hunting · low
detecting-privilege-escalation-attempts
threat hunting · low
detecting-privilege-escalation-in-kubernetes-pods
container security · low
detecting-process-hollowing-technique
threat hunting · low
detecting-s3-data-exfiltration-attempts
cloud security · low
detecting-serverless-function-injection
cloud security · low
detecting-service-account-abuse
threat hunting · low
detecting-shadow-api-endpoints
api security · medium
detecting-shadow-it-cloud-usage
cloud security · low
detecting-stuxnet-style-attacks
ot ics security · medium
detecting-suspicious-oauth-application-consent
cloud security · low
detecting-suspicious-powershell-execution
threat hunting · low
detecting-t1055-process-injection-with-sysmon
threat hunting · low
detecting-t1548-abuse-elevation-control-mechanism
threat hunting · low
detecting-wmi-persistence
threat hunting · low
Device Fingerprint Spoofing
identity access management · low
Device Fingerprint Spoofing
identity access management · low
Electronic Funds Transfer: Wire Transfer
threat intelligence · low
Electronic Funds Transfer: Wire Transfer
phishing defense · medium
Email Spoofing
threat intelligence · low
emulating-cloud-attacks-with-stratus-red-team
cloud security · low
enumerating-cloud-with-cloudfox
cloud security · low
escaping-containers-to-host
container security · low
evaluating-threat-intelligence-platforms
threat intelligence · low
executing-active-directory-attack-simulation
penetration testing · medium
executing-nist-rmf-authorization-to-operate
compliance governance · low
executing-red-team-engagement-planning
red teaming · high
executing-red-team-exercise
penetration testing · medium
exploiting-active-directory-certificate-services-esc1
red teaming · high
exploiting-active-directory-with-bloodhound
red teaming · high
exploiting-adcs-with-certipy
red teaming · high
exploiting-api-injection-vulnerabilities
api security · medium
exploiting-aws-with-pacu
cloud security · low
exploiting-broken-function-level-authorization
api security · medium
exploiting-broken-link-hijacking
web application security · medium
exploiting-constrained-delegation-abuse
red teaming · high
exploiting-excessive-data-exposure-in-api
api security · medium
exploiting-http-request-smuggling
web application security · medium
exploiting-idor-vulnerabilities
web application security · medium
exploiting-insecure-deserialization
web application security · medium
exploiting-jwt-algorithm-confusion-attack
api security · medium
exploiting-kerberoasting-with-impacket
red teaming · high
exploiting-mass-assignment-in-rest-apis
web application security · medium
exploiting-ms17-010-eternalblue-vulnerability
red teaming · high
exploiting-nopac-cve-2021-42278-42287
red teaming · high
exploiting-nosql-injection-vulnerabilities
web application security · medium
exploiting-oauth-misconfiguration
web application security · medium
exploiting-prototype-pollution-in-javascript
web application security · medium
exploiting-race-condition-vulnerabilities
web application security · medium
exploiting-server-side-request-forgery
web application security · medium
exploiting-sql-injection-vulnerabilities
penetration testing · medium
exploiting-sql-injection-with-sqlmap
web application security · medium
exploiting-template-injection-vulnerabilities
web application security · medium
exploiting-type-juggling-vulnerabilities
web application security · medium
exploiting-websocket-vulnerabilities
web application security · medium
exploiting-zerologon-vulnerability-cve-2020-1472
red teaming · high
extracting-browser-history-artifacts
digital forensics · low
extracting-windows-event-logs-artifacts
digital forensics · low
fleet-hunting-with-velociraptor
threat hunting · low
Gather Customer Information
threat intelligence · low
generating-forensic-timelines-with-hayabusa
digital forensics · low
generating-threat-intelligence-reports
threat intelligence · low
hardening-docker-containers-for-production
container security · low
hardening-docker-daemon-configuration
container security · low
hardening-linux-endpoint-with-cis-benchmark
endpoint security · low
hardening-windows-endpoint-with-cis-benchmark
endpoint security · low
hunting-advanced-persistent-threats
threat intelligence · low
hunting-evtx-with-chainsaw
threat hunting · low
hunting-for-anomalous-powershell-execution
threat hunting · low
hunting-for-beaconing-with-frequency-analysis
threat hunting · low
hunting-for-cobalt-strike-beacons
threat hunting · low
hunting-for-command-and-control-beaconing
threat hunting · low
hunting-for-data-exfiltration-indicators
threat hunting · low
hunting-for-data-staging-before-exfiltration
threat hunting · low
hunting-for-dcom-lateral-movement
threat hunting · low
hunting-for-dcsync-attacks
threat hunting · low
hunting-for-defense-evasion-via-timestomping
threat hunting · low
hunting-for-dns-based-persistence
threat hunting · low
hunting-for-dns-tunneling-with-zeek
threat hunting · low
hunting-for-domain-fronting-c2-traffic
threat hunting · low
hunting-for-lateral-movement-via-wmi
threat hunting · low
hunting-for-living-off-the-cloud-techniques
threat hunting · low
hunting-for-living-off-the-land-binaries
threat hunting · low
hunting-for-lolbins-execution-in-endpoint-logs
threat hunting · low
hunting-for-ntlm-relay-attacks
threat hunting · low
hunting-for-persistence-mechanisms-in-windows
threat hunting · low
hunting-for-persistence-via-wmi-subscriptions
threat hunting · low
hunting-for-process-injection-techniques
threat hunting · low
hunting-for-registry-persistence-mechanisms
threat hunting · low
hunting-for-registry-run-key-persistence
threat hunting · low
hunting-for-scheduled-task-persistence
threat hunting · low
hunting-for-shadow-copy-deletion
threat hunting · low
hunting-for-startup-folder-persistence
threat hunting · low
hunting-for-supply-chain-compromise
threat hunting · low
hunting-for-suspicious-scheduled-tasks
threat hunting · low
hunting-for-t1098-account-manipulation
threat hunting · low
hunting-for-unusual-network-connections
threat hunting · low
hunting-for-unusual-service-installations
threat hunting · low
hunting-for-webshell-activity
threat hunting · low
Impersonate Account Holder
phishing defense · medium
Impersonate Account Holder
phishing defense · medium
implementing-aes-encryption-for-data-at-rest
cryptography · low
implementing-api-abuse-detection-with-rate-limiting
api security · medium
implementing-api-gateway-security-controls
api security · medium
implementing-api-key-security-controls
api security · medium
implementing-api-rate-limiting-and-throttling
api security · medium
implementing-api-schema-validation-security
api security · medium
implementing-api-security-posture-management
api security · medium
implementing-api-security-testing-with-42crunch
api security · medium
implementing-api-threat-protection-with-apigee
api security · medium
implementing-application-whitelisting-with-applocker
endpoint security · low
implementing-aws-config-rules-for-compliance
cloud security · low
implementing-aws-iam-permission-boundaries
identity access management · low
implementing-aws-macie-for-data-classification
cloud security · low
implementing-aws-nitro-enclave-security
cloud security · low
implementing-aws-security-hub
cloud security · low
implementing-aws-security-hub-compliance
cloud security · low
implementing-azure-defender-for-cloud
cloud security · low
implementing-beyondcorp-zero-trust-access-model
zero trust architecture · low
implementing-cisa-zero-trust-maturity-model
zero trust architecture · low
implementing-cloud-dlp-for-data-protection
cloud security · low
implementing-cloud-security-posture-management
cloud security · low
implementing-cloud-trail-log-analysis
cloud security · low
implementing-cloud-waf-rules
cloud security · low
implementing-cloud-workload-protection
cloud security · low
implementing-conditional-access-policies-azure-ad
identity access management · low
implementing-conduit-security-for-ot-remote-access
ot ics security · medium
implementing-container-image-minimal-base-with-distroless
container security · low
implementing-container-network-policies-with-calico
container security · low
implementing-device-posture-assessment-in-zero-trust
zero trust architecture · low
implementing-diamond-model-analysis
threat intelligence · low
implementing-digital-signatures-with-ed25519
cryptography · low
implementing-disk-encryption-with-bitlocker
endpoint security · low
implementing-dmarc-dkim-spf-email-security
phishing defense · medium
implementing-dragos-platform-for-ot-monitoring
ot ics security · medium
implementing-email-sandboxing-with-proofpoint
phishing defense · medium
implementing-end-to-end-encryption-for-messaging
cryptography · low
implementing-endpoint-dlp-controls
endpoint security · low
implementing-envelope-encryption-with-aws-kms
cryptography · low
implementing-file-integrity-monitoring-with-aide
endpoint security · low
implementing-gcp-binary-authorization
cloud security · low
implementing-gcp-organization-policy-constraints
cloud security · low
implementing-gcp-vpc-firewall-rules
cloud security · low
implementing-gdpr-data-protection-controls
compliance governance · low
implementing-hipaa-security-rule-safeguards
compliance governance · low
implementing-ics-firewall-with-tofino
ot ics security · medium
implementing-iec-62443-security-zones
ot ics security · medium
implementing-image-provenance-verification-with-cosign
container security · low
implementing-iso-27001-information-security-management
compliance governance · low
implementing-just-in-time-access-provisioning
identity access management · low
implementing-jwt-signing-and-verification
cryptography · low
implementing-kubernetes-network-policy-with-calico
container security · low
implementing-kubernetes-pod-security-standards
container security · low
implementing-memory-protection-with-dep-aslr
endpoint security · low
implementing-microsegmentation-with-guardicore
zero trust architecture · low
implementing-nerc-cip-compliance-controls
ot ics security · medium
implementing-network-policies-for-kubernetes
container security · low
implementing-network-segmentation-for-ot
ot ics security · medium
implementing-opa-gatekeeper-for-policy-enforcement
container security · low
implementing-ot-incident-response-playbook
ot ics security · medium
implementing-ot-network-traffic-analysis-with-nozomi
ot ics security · medium
implementing-passwordless-authentication-with-fido2
identity access management · low
implementing-patch-management-for-ot-systems
ot ics security · medium
implementing-pci-dss-compliance-controls
compliance governance · low
implementing-pod-security-admission-controller
container security · low
implementing-privileged-session-monitoring
identity access management · low
implementing-purdue-model-network-segmentation
ot ics security · medium
implementing-rbac-hardening-for-kubernetes
container security · low
implementing-rsa-key-pair-management
cryptography · low
implementing-runtime-security-with-tetragon
container security · low
implementing-secrets-management-with-vault
cloud security · low
implementing-security-information-sharing-with-stix2
threat intelligence · low
implementing-stix-taxii-feed-integration
threat intelligence · low
implementing-supply-chain-security-with-in-toto
container security · low
implementing-taxii-server-with-opentaxii
threat intelligence · low
implementing-threat-intelligence-lifecycle-management
threat intelligence · low
implementing-usb-device-control-policy
endpoint security · low
implementing-web-application-logging-with-modsecurity
web application security · medium
implementing-zero-knowledge-proof-for-authentication
cryptography · low
implementing-zero-standing-privilege-with-cyberark
identity access management · low
implementing-zero-trust-dns-with-nextdns
zero trust architecture · low
implementing-zero-trust-for-saas-applications
zero trust architecture · low
implementing-zero-trust-in-cloud
cloud security · low
implementing-zero-trust-network-access
cloud security · low
implementing-zero-trust-network-access-with-zscaler
zero trust architecture · low
Insider Access Abuse
identity access management · low
Insider Access Abuse
zero trust architecture · low
managing-intelligence-lifecycle
threat intelligence · low
managing-third-party-vendor-risk
compliance governance · low
mapping-attack-paths-with-bloodhound-ce
red teaming · high
mapping-mitre-attack-techniques
threat intelligence · low
migrating-to-post-quantum-cryptography
cryptography · low
modeling-threats-with-opencti
threat intelligence · low
moving-laterally-with-netexec
penetration testing · medium
operating-havoc-c2
red teaming · high
operating-sliver-c2
red teaming · high
operationalizing-misp-threat-feeds
threat intelligence · low
parsing-artifacts-with-eric-zimmerman-tools
digital forensics · low
performing-access-review-and-certification
identity access management · low
performing-active-directory-bloodhound-analysis
red teaming · high
performing-active-directory-penetration-test
penetration testing · medium
performing-ai-driven-osint-correlation
threat intelligence · low
performing-api-fuzzing-with-restler
api security · medium
performing-api-inventory-and-discovery
api security · medium
performing-api-rate-limiting-bypass
api security · medium
performing-api-security-testing-with-postman
api security · medium
performing-aws-account-enumeration-with-scout-suite
cloud security · low
performing-aws-privilege-escalation-assessment
cloud security · low
performing-blind-ssrf-exploitation
web application security · medium
performing-clickjacking-attack-test
web application security · medium
performing-cloud-asset-inventory-with-cartography
cloud security · low
performing-cloud-forensics-investigation
digital forensics · low
performing-cloud-forensics-with-aws-cloudtrail
cloud security · low
performing-cloud-log-forensics-with-athena
cloud security · low
performing-cloud-native-forensics-with-falco
cloud security · low
performing-cloud-native-threat-hunting-with-aws-detective
cloud security · low
performing-cloud-penetration-testing-with-pacu
cloud security · low
performing-cloud-storage-forensic-acquisition
digital forensics · low
performing-container-escape-detection
container security · low
performing-container-security-scanning-with-trivy
container security · low
performing-content-security-policy-bypass
web application security · medium
performing-csrf-attack-simulation
web application security · medium
performing-dark-web-monitoring-for-threats
threat intelligence · low
performing-directory-traversal-testing
web application security · medium
performing-dmarc-policy-enforcement-rollout
phishing defense · medium
performing-docker-bench-security-assessment
container security · low
performing-endpoint-forensics-investigation
endpoint security · low
performing-endpoint-vulnerability-remediation
endpoint security · low
performing-external-network-penetration-test
penetration testing · medium
performing-file-carving-with-foremost
digital forensics · low
performing-gcp-penetration-testing-with-gcpbucketbrute
cloud security · low
performing-gcp-security-assessment-with-forseti
cloud security · low
performing-graphql-depth-limit-attack
api security · medium
performing-graphql-introspection-attack
api security · medium
performing-graphql-security-assessment
web application security · medium
performing-hardware-security-module-integration
cryptography · low
performing-hash-cracking-with-hashcat
cryptography · low
performing-http-parameter-pollution-attack
web application security · medium
performing-ics-asset-discovery-with-claroty
ot ics security · medium
performing-indicator-lifecycle-management
threat intelligence · low
performing-iot-security-assessment
penetration testing · medium
performing-ip-reputation-analysis-with-shodan
threat intelligence · low
performing-jwt-none-algorithm-attack
api security · medium
performing-kerberoasting-attack
red teaming · high
performing-kubernetes-cis-benchmark-with-kube-bench
container security · low
performing-kubernetes-etcd-security-assessment
container security · low
performing-kubernetes-penetration-testing
container security · low
performing-lateral-movement-with-wmiexec
red teaming · high
performing-linux-log-forensics-investigation
digital forensics · low
performing-log-analysis-for-forensic-investigation
digital forensics · low
performing-malware-hash-enrichment-with-virustotal
threat intelligence · low
performing-malware-ioc-extraction
threat intelligence · low
performing-malware-persistence-investigation
digital forensics · low
performing-memory-forensics-with-volatility3
digital forensics · low
performing-mobile-device-forensics-with-cellebrite
digital forensics · low
performing-network-forensics-with-wireshark
digital forensics · low
performing-network-packet-capture-analysis
digital forensics · low
performing-nist-csf-maturity-assessment
compliance governance · low
performing-oil-gas-cybersecurity-assessment
ot ics security · medium
performing-open-source-intelligence-gathering
red teaming · high
performing-osint-with-spiderfoot
threat intelligence · low
performing-ot-network-security-assessment
ot ics security · medium
performing-ot-vulnerability-assessment-with-claroty
ot ics security · medium
performing-ot-vulnerability-scanning-safely
ot ics security · medium
performing-physical-intrusion-assessment
red teaming · high
performing-plc-firmware-security-analysis
ot ics security · medium
performing-post-quantum-cryptography-migration
cryptography · low
performing-power-grid-cybersecurity-assessment
ot ics security · medium
performing-privilege-escalation-assessment
penetration testing · medium
performing-privilege-escalation-on-linux
red teaming · high
performing-privileged-account-access-review
identity access management · low
performing-privileged-account-discovery
identity access management · low
performing-s7comm-protocol-security-analysis
ot ics security · medium
performing-scada-hmi-security-assessment
ot ics security · medium
performing-second-order-sql-injection
web application security · medium
performing-security-headers-audit
web application security · medium
performing-serverless-function-security-review
cloud security · low
performing-service-account-audit
identity access management · low
performing-soap-web-service-security-testing
api security · medium
performing-sqlite-database-forensics
digital forensics · low
performing-ssl-certificate-lifecycle-management
cryptography · low
performing-steganography-detection
digital forensics · low
performing-subdomain-enumeration-with-subfinder
web application security · medium
performing-thick-client-application-penetration-test
penetration testing · medium
performing-threat-emulation-with-atomic-red-team
threat intelligence · low
performing-threat-hunting-with-yara-rules
threat hunting · low
performing-threat-intelligence-sharing-with-misp
threat intelligence · low
performing-threat-landscape-assessment-for-sector
threat intelligence · low
performing-timeline-reconstruction-with-plaso
digital forensics · low
performing-vulnerability-scanning-with-nessus
penetration testing · medium
performing-web-application-firewall-bypass
web application security · medium
performing-web-application-penetration-test
penetration testing · medium
performing-web-cache-deception-attack
web application security · medium
performing-web-cache-poisoning-attack
web application security · medium
performing-windows-artifact-analysis-with-eric-zimmerman-tools
digital forensics · low
performing-wireless-network-penetration-test
penetration testing · medium
Phishing
threat intelligence · low
Phishing
threat intelligence · low
Phishing for Information
zero trust architecture · low
Phone Number Spoofing: Official Phone Number Spoofing
red teaming · high
post-exploiting-microsoft-graph-with-graphrunner
identity access management · low
processing-stix-taxii-feeds
threat intelligence · low
profiling-threat-actor-groups
threat intelligence · low
recovering-deleted-files-with-photorec
digital forensics · low
relaying-ntlm-for-adcs-esc8
red teaming · high
remediating-s3-bucket-misconfiguration
cloud security · low
scanning-container-images-with-grype
container security · low
scanning-docker-images-with-trivy
container security · low
scanning-kubernetes-manifests-with-kubesec
container security · low
securing-api-gateway-with-aws-waf
cloud security · low
securing-aws-lambda-execution-roles
cloud security · low
securing-azure-with-microsoft-defender
cloud security · low
securing-container-registry-images
cloud security · low
securing-container-registry-with-harbor
container security · low
securing-helm-chart-deployments
container security · low
securing-historian-server-in-ot-environment
ot ics security · medium
securing-kubernetes-on-cloud
cloud security · low
securing-remote-access-to-ot-environment
ot ics security · medium
securing-serverless-functions
cloud security · low
Stage Capabilities: SEO Poisoning
threat intelligence · low
Steal Web Session Cookie
zero trust architecture · low
Steal Web Session Cookie
identity access management · low
Steal Web Session Cookie
identity access management · low
testing-api-authentication-weaknesses
api security · medium
testing-api-for-broken-object-level-authorization
api security · medium
testing-api-for-mass-assignment-vulnerability
api security · medium
testing-api-security-with-owasp-top-10
web application security · medium
testing-cors-misconfiguration
web application security · medium
testing-for-broken-access-control
web application security · medium
testing-for-business-logic-vulnerabilities
web application security · medium
testing-for-email-header-injection
web application security · medium
testing-for-host-header-injection
web application security · medium
testing-for-json-web-token-vulnerabilities
web application security · medium
testing-for-open-redirect-vulnerabilities
web application security · medium
testing-for-sensitive-data-exposure
web application security · medium
testing-for-xml-injection-vulnerabilities
web application security · medium
testing-for-xss-vulnerabilities
penetration testing · medium
testing-for-xss-vulnerabilities-with-burpsuite
web application security · medium
testing-for-xxe-injection-vulnerabilities
web application security · medium
testing-jwt-token-security
web application security · medium
testing-oauth2-implementation-flaws
api security · medium
testing-websocket-api-security
api security · medium
Transfer of funds
threat hunting · low
triaging-windows-with-kape
digital forensics · low
Use Alternate Authentication Material: Application Access Token
cloud security · low
Use Alternate Authentication Material: Application Access Token
cloud security · low
© 2026 Casky.AI, Inc. · AI Security Investigation