MITRE ATT&CK · Web series coverage
What this series lights up
Every mission and quiz in the Web labs is tagged with a MITRE ATT&CK technique. This view reads those tags across all labs and lights the matrix. In-scope techniques not yet built stay dimmed until their lab ships — Waves 1–2 light T1595.003 (Discovery), T1190 + T1059 (SSTI → RCE), T1505.003 (Web Shell), T1552.005 (SSRF → metadata) and T1213 (IDOR). Wave 3 adds T1539 (XSS → Session) and T1071.001 (Web Shell C2). Wave 4 adds T1041 + T1567.002 (Exfiltration) and T1491.001 (Defacement).
In ATT&CK, not taught here
Taught by the series
Mission completed
Web Discovery
SSTI → RCE
Web Shell
SSRF
IDOR
XSS → Session
Web Shell C2
Exfiltration
Defacement
Blue Team