Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command And Control	Exfiltration	Impact
Search Open Sources	Commercial License Abuse	RAG Poisoning	Prompt Injection	Resource Poisoning	Jailbreaking	Indirect Data Access	Retrieval Tool Credential Harvesting	Delimiters and Special Character Extraction	Shared Resource Poisoning	RAG Data Harvesting	Search Index C2	Granular Clickable Link Rendering	Citation Manipulation
Active Scanning	Prompt Crafting	Retrieval Tool Poisoning	Off-Target Language	LLM Prompt Self-Replication	Crescendo	Distraction	RAG Credential Harvesting	Whoami	Message Poisoning	Memory Data Hording	Public Web C2	Granular Web Request Triggering	AI Social Engineering
Search Closed Sources	Publish Hallucinated Entities	Targeted RAG Poisoning	System Instruction Keywords	Thread Infection	Off-Target Language	Citation Silencing		Failure Mode Mapping		User Message Harvesting		Web Request Triggering	Mutative Tool Invocation
Finding RAG-Indexed Targets	Prompt Stabilizing	Compromised User		Memory Infection	System Instruction Keywords	Blank Image		Discover LLM Hallucinations		Retrieval Tool Data Harvesting		Clickable Link Rendering
		Web Poisoning				Conditional Execution		Embedded Knowledge Exposure		Thread History Harvesting		Write Tool Invocation
		Guest User Abuse				URL Familiarizing		System Instructions Extraction				Image Rendering
		User Manipulation				Delayed Execution		Tool Definition Discovery
						ASCII Smuggling
						RAG Injection
						These Aren't The Droids