Reference

SECURITY
glossary.

Sixty cybersecurity terms explained in plain English — from BOLA and SSRF to Kerberoasting and Zero Trust. Each entry links to related concepts so you can follow a thread.

A–Z

A B C D E G H I J K L M N O P R S W X Z

A

AS-REP RoastingAn Active Directory attack against accounts with Kerberos preauthentication disabled — letting an attacker harvest crackable AS-REP responses for any such account.

B

Blue TeamThe defenders — typically the SOC, incident response, and threat-hunting teams responsible for detecting and responding to attacks.
Broken Function Level Authorization (BFLA)When a user can invoke functions (admin endpoints, privileged operations) that should be restricted to higher-privilege roles.
Broken Object Level Authorization (BOLA)A vulnerability where an API exposes object identifiers (like /users/42/profile) without verifying that the caller is allowed to access that specific object.

C

D

E

G

H

I

J

JSON Web Token (JWT)A compact, URL-safe token format used for stateless authentication and authorization, typically signed with HMAC or RSA/ECDSA.

K

KerberoastingAn Active Directory attack where an authenticated user requests Kerberos service tickets for accounts with SPNs, then cracks the ticket offline to recover the service account password.

L

M

N

NTLM RelayAn attack where an attacker captures NTLM authentication traffic and relays it to a different target service to authenticate as the victim.

O

P

R

S

W

WebAuthn & PasskeysA W3C standard for phishing-resistant authentication using public-key cryptography and hardware-backed credentials.

X

XML External Entity (XXE)An attack against XML parsers that allows reading local files, performing SSRF, or causing denial-of-service via external entity declarations.

Z

Zero TrustA security model that assumes no implicit trust based on network location — every access request is authenticated, authorized, and continuously validated.

Have a term to add?

TALK TO A
pen tester.

Found something missing? Drop us a line — or book a free 30-minute scoping call.

Book Free Scoping Call →All Services