Categories infrastructure Damn Vulnerable Web Application Infrastructure FTP Infrastructure Vulnerable Node.js Application SMTP, IMAP, & DNS Infrastructure exfiltration Data Exfiltration over SaaS (safe application enablement) Application Firewall Data Exfiltration over UDP (ptunnel) Application Firewall Bypass over DNS (iodine) Application Firewall Application Evasion over SSH DNS Subdomain Data Exfiltration Application Firewall Data Exfiltration over FTP Application Firewall Data Exfiltration over DNS initialaccess Web Server Compromise - Node.js Remote Command Execution Web Server Compromise - OWASP Spearphishing Link Spearphishing Deploy Malware Web Server Compromise - Apache Struts phishing Spearphishing Link Spearphishing Credential Theft Spearphishing Deploy Malware credentialaccess Spearphishing Credential Theft