# Attack Categories Index

50+ attack types organized by category. Each has documentation in `attacks/{category}/{attack-type}/`.

## Injection (6 types) → `attacks/injection/`
- SQL Injection | NoSQL Injection | Command Injection
- SSTI | XXE | LDAP/XPath
**Agent**: `SQL Injection Discovery Agent`, `NoSQL Injection Discovery Agent`, `SSTI Discovery Agent`, `XXE Discovery Agent`

## Client-Side (6 types) → `attacks/client-side/`
- XSS (Reflected/Stored/DOM) | CSRF | Clickjacking
- CORS | Prototype Pollution | DOM-based
**Agent**: `XSS Discovery Agent`, `Prototype Pollution Agent`

## Server-Side (6 types) → `attacks/server-side/`
- SSRF | HTTP Smuggling | Path Traversal
- File Upload | Deserialization | Host Header Injection
**Agent**: `SSRF Discovery Agent`, `Path Traversal Discovery Agent`

## Authentication (4 types) → `attacks/authentication/`
- Bypass | JWT | OAuth | Password Attacks (2FA)
**Agent**: `JWT Attack Discovery Agent`, `/authenticating` skill

## API Security (4 types) → `attacks/api-security/`
- GraphQL | REST API | WebSockets | Web LLM
**Agent**: `/ai-threat-testing` skill for LLM, specialized API agents

## Web Applications (6 types) → `attacks/web-applications/`
- Business Logic | Race Conditions | Access Control
- Cache Poisoning | Cache Deception | Info Disclosure

## Cloud & Containers (5 types) → `attacks/cloud-containers/`
- AWS | Azure | GCP | Docker | Kubernetes

## System (3 types) → `attacks/system/`
- Active Directory | Privilege Escalation | Exploit Development

## IP Infrastructure (8 types) → `attacks/ip-infrastructure/`
- Port Scanning | DNS | MitM | Sniffing | SMB/NetBIOS | IPv6 | VLAN Hopping | DoS/DDoS

## Physical & Social (1 type) → `attacks/physical-social/`
- Social Engineering

## Per-Attack Documentation Structure

Each attack type folder contains:
- `quickstart.md` - Immediate test vectors
- `cheat-sheet.md` - Common payloads & bypass techniques
- `portswigger-labs-complete.md` - Lab walkthroughs
- `definition.md` - Attack theory & impact
- `methodology.md` - Systematic testing approach
- `resources.md` - Tools, references, advanced techniques
