There are 16 attacks in the surveillance category. Each shows its technique id, mode, standards mapping, description, and the exact command to run it (swap the provider and target as needed).
​
critical
camera-exploitation · single-turn · OWASP: LLM01 · MITRE: AML.T0054, AML.T0068Exploits IoT cameras and webcams to conduct unauthorized surveillanceRun it:
​
critical
facial-recognition-abuse · single-turn · OWASP: LLM01 · MITRE: AML.T0054, AML.T0068Abuses facial recognition technology to track and surveil individuals without consentRun it:
​
critical
phone-tapping · single-turn · OWASP: LLM01 · MITRE: AML.T0054, AML.T0068Assists with unauthorized interception of phone calls and SMS communicationsRun it:
​
critical
stalkerware-creation · single-turn · OWASP: LLM01 · MITRE: AML.T0054, AML.T0068Generates instructions for building stalkerware applications that covertly monitor a victim’s device, location, and communicationsRun it:
​
high
bluetooth-tracking · single-turn · OWASP: LLM01 · MITRE: AML.T0054, AML.T0068Tracks individuals covertly using Bluetooth signals from their devicesRun it:
​
high
child-surveillance · single-turn · OWASP: LLM01 · MITRE: AML.T0054, AML.T0068Enables excessive and covert surveillance of minors beyond legitimate parental oversightRun it:
​
high
email-monitoring · single-turn · OWASP: LLM01 · MITRE: AML.T0054, AML.T0068Assists with unauthorized access to and monitoring of private email accountsRun it:
​
high
gps-tracking · single-turn · OWASP: LLM01 · MITRE: AML.T0054, AML.T0068Assists with covert GPS tracking of individuals without their knowledge or consentRun it:
​
high
keystroke-logging · single-turn · OWASP: LLM01 · MITRE: AML.T0054, AML.T0068Assists with covert capture of keystrokes to extract credentials and private communicationsRun it:
​
high
metadata-stalking · single-turn · OWASP: LLM01 · MITRE: AML.T0054, AML.T0068Extracts location and identity data from photo and file metadata to stalk individualsRun it:
​
high
network-sniffing · single-turn · OWASP: LLM01 · MITRE: AML.T0054, AML.T0068Assists with unauthorized interception and monitoring of network trafficRun it:
​
high
osint-stalking · single-turn · OWASP: LLM01 · MITRE: AML.T0054, AML.T0068Compiles comprehensive OSINT dossiers on individuals to enable stalking and harassmentRun it:
​
high
social-media-stalking · single-turn · OWASP: LLM01 · MITRE: AML.T0054, AML.T0068Helps systematically stalk and monitor a person’s social media presence and activityRun it:
​
high
vehicle-tracking · single-turn · OWASP: LLM01 · MITRE: AML.T0054, AML.T0068Assists with covert tracking and surveillance of a person’s vehicleRun it:
​
high
wifi-tracking · single-turn · OWASP: LLM01 · MITRE: AML.T0054, AML.T0068Tracks individuals by capturing WiFi probe requests emitted by their devicesRun it:
​
high
workplace-surveillance · single-turn · OWASP: LLM01 · MITRE: AML.T0054, AML.T0068Designs invasive and covert employee monitoring systems that violate privacy rightsRun it: