loader
Redeyed Intelligence Library

Know the attack.
Defend with context.

A living, defender-first encyclopedia of denial-of-service, malware, identity, application, network, cloud, supply-chain and emerging attacks—organized by the layer and system each technique affects.

Current catalog 32 attack families

Version 1.1 · Reviewed August 15, 2026 · Maintained as threats and standards evolve.

11Defensive categories
9DDoS families
16Critical-impact topics
L3 · L4 · L7OSI coverage
Defensive reference. This wiki explains recognition, prevention and incident response. It intentionally omits payloads, attack commands and procedural instructions that could enable abuse. No catalog can be permanently exhaustive; the review date shows the freshness of this living taxonomy.

Browse by attack surface

Mirai is classified as botnet infrastructure; the Layer 3, 4 and 7 techniques it delivers are classified separately.

2 topics

DDoS — Layer 3

Network-layer floods and malformed IP traffic that exhaust paths, routers or packet-processing capacity.
3 topics

DDoS — Layer 4

Transport-layer attacks against TCP, UDP, state tables and exposed network services.
4 topics

DDoS — Layer 7

Application and protocol abuse designed to consume web, API, DNS, TLS or game-service resources.
1 topics

IoT & Mirai Botnets

Compromised cameras, routers, appliances and proxy networks used as distributed attack infrastructure.
4 topics

Ransomware & Malware

Malicious code used for extortion, persistence, espionage, destruction, theft or unauthorized computing.
5 topics

Web & API Attacks

Attacks against authorization, input handling, sessions, business logic and server-side application behavior.
4 topics

Identity & Social Engineering

Account takeover and human-targeted methods that abuse credentials, trust, recovery flows or authentication.
2 topics

Network & Infrastructure

Traffic interception, routing manipulation, name-service abuse and local-network attacks.
3 topics

Cloud & Supply Chain

Compromise through cloud control planes, dependencies, build systems, containers and trusted vendors.
1 topics

Data, Insider & Impact

Theft, manipulation, destruction, extortion and misuse of privileged access.
3 topics

AI & Emerging Attacks

Attacks against models, agents, training data and AI-connected tools, plus fast-evolving abuse patterns.

Attack library

Search by attack name, alias, protocol or framework reference.

5 results

Filtered catalog

Web & API Attacks

5 topics
critical risk OSI Layer 7 / Authorization

Broken Access Control and Logic Flaws

The application authenticates the user but fails to enforce what that user is allowed to do, in what order, or how often.

Open defensive brief
high risk OSI Layer 7 / Browser

Cross-Site Scripting

Attacker-controlled script executes in another user's browser under the origin of the vulnerable site, inheriting that user's session and permissions.

Open defensive brief
high risk OSI Layer 7 / HTTP intermediaries

HTTP Protocol and Session Abuse

Disagreements between intermediaries about how a request is framed, cached or authorised let an attacker affect other users' traffic rather than only their own.

Open defensive brief
critical risk OSI Layer 7 / Interpreter

Injection: SQL, Command, Template and Deserialization

Untrusted data crosses into an interpreter as code because it was combined with a query, command or object graph rather than passed as a parameter.

Open defensive brief
critical risk OSI Layer 7 / Server egress and filesystem

SSRF and Path Traversal

A feature that fetches a resource accepts an untrusted destination, letting an attacker use the server's network position or filesystem access as their own.

Open defensive brief