Merge branch 'v2025-update' into v2025-update

Author: cyber-cyril

_tactics/08-mitigation-bypass.md _tactics/08-captcha-bypass.md_tactics/08-mitigation-bypass.md renamed to _tactics/08-captcha-bypass.md

@@ -1,5 +1,5 @@
 ---
-title: Mitigation Bypass
+title: CAPTCHA Bypass
 parent: /phases/03-defence-bypass
 ref-id: TAC-08
 short-desc: The adversary attempts to bypass CAPTCHA-based defensive measures through either automated or manual methods.

_tactics/10-proxying.md

@@ -2,6 +2,6 @@
 title: Proxying
 parent: /phases/03-defence-bypass
 ref-id: TAC-10
-short-desc: The adversary seeks to obfuscate the origin of their activity and bypass IP and geo-blocking by using a server application or appliance that acts as an intermediary for requests from clients to the web app.
+short-desc: The adversary seeks to disguise their true attack with diversionary measures, or to hide their actual attack amongst other activity (which may appear/be legitimate, malicious, or noise).
 layout: tactic
 ---

_tactics/25-accessibility-options-abuse.md

@@ -0,0 +1,7 @@
+---
+title: Accessibility Options Abuse
+parent: /phases/03-defence-bypass
+ref-id: TAC-25
+short-desc: The adversary takes advantage of accessibility features, processes and technology
+layout: tactic
+---

_tactics/26-impersonation.md

@@ -0,0 +1,7 @@
+---
+title: Impersonation
+parent: /phases/03-defence-bypass
+ref-id: TAC-26
+short-desc: Impersonation involves an adversary pretending to be someone else or a trusted entity to deceive business tools or the defensive tools into allowing access to applications, sites or information that they should not be allowed to access.
+layout: tactic
+---

_tactics/27-session-manipulation.md

@@ -0,0 +1,7 @@
+---
+title: Impersonation
+parent: /phases/03-defence-bypass
+ref-id: TAC-27
+short-desc: Session Manipulation is the process of manipulating or abusing technical processes to fool defensive tooling into trusting the session or assuming the session of another user
+layout: tactic
+---

_tactics/28-queue-bypass.md

@@ -0,0 +1,7 @@
+---
+title: Queue Bypass
+parent: /phases/03-defence-bypass
+ref-id: TAC-28
+short-desc: Queue Bypass is a tactic used to evade virtual waiting lines and gain priority access to limited goods or services.
+layout: tactic
+---

_tactics/32-geo-location-spoofing.md

@@ -0,0 +1,7 @@
+---
+title: Geo-Location Spoofing
+parent: /phases/03-defence-bypass
+ref-id: TAC-32
+short-desc: The adversary seeks to obfuscate the origin of their activity, access geo-fenced resources or bypass geo-blocking by spoofing their geolocation
+layout: tactic
+---

_tactics/33-device-emulation.md

@@ -0,0 +1,7 @@
+---
+title: Device Emulation
+parent: /phases/03-defence-bypass
+ref-id: TAC-33
+short-desc: The adversary emulates device attributes, such as user agents or hardware fingerprints. They do this to simulate the behaviour of another device.
+layout: tactic
+---

_tactics/35-fake-credibility-generation.md

@@ -0,0 +1,7 @@
+---
+title: Fake Credibility Generation
+parent: /phases/03-defence-bypass
+ref-id: TAC-35
+short-desc: The adversary seeks to establish their credibility by building a false reputation. Some sites may limit certain interactions or activities to those accounts that have performed certain actions or been active on the site for a certain length of time.
+layout: tactic
+---

_techniques/002-url-disguise.md

@@ -2,6 +2,6 @@
 title: URL Disguise
 parent: /tactics/01-website-creation
 ref-id: TEQ-002
-short-desc: URL Disguise is where an adversary attempts to make their illegitimate version of a legitimate site appear to be the legitimate domain by associating it with a similar URL (such as F0rbes.com or G00gle.com). Traffic to and from this site may thus be mistaken by a human analyst as being associated with the legitimate version of the site. Alternatively an adversary may employ a shortened URL (such as a bit.ly address) in order to obfuscate the true URL.
+short-desc: URL Disguise is where an adversary attempts to make their illegitimate version of a site appear to be the legitimate domain by associating it with a similar URL (such as F0rbes.com or G00gle.com). Traffic to and from this site may thus be mistaken by a human as being associated with the legitimate version of the site. Alternatively an adversary may employ a shortened URL (such as a bit.ly address) in order to obfuscate the true URL.
 layout: technique
 ---