Attack patterns (CAPEC)

558 pages, showing 1–100, ordered by identifier.

CAPEC-1 — Accessing Functionality Not Properly Constrained by ACLs In applications, particularly web applications, access to functionality is mitigated by an authorization framework....
CAPEC-10 — Buffer Overflow via Environment Variables This attack pattern involves causing a buffer overflow through manipulation of environment variables. Once the...
CAPEC-100 — Overflow Buffers Buffer Overflow attacks target improper or missing bounds checking on buffer operations, typically triggered by...
CAPEC-101 — Server Side Include (SSI) Injection An attacker can use Server Side Include (SSI) Injection to send code to a web application that then gets executed by...
CAPEC-102 — Session Sidejacking Session sidejacking takes advantage of an unencrypted communication channel between a victim and target system. The...
CAPEC-103 — Clickjacking An adversary tricks a victim into unknowingly initiating some action in one system while interacting with the UI...
CAPEC-104 — Cross Zone Scripting An attacker is able to cause a victim to load content into their web-browser that bypasses security zone controls...
CAPEC-105 — HTTP Request Splitting An adversary abuses the flexibility and discrepancies in the parsing and interpretation of HTTP Request messages by...
CAPEC-107 — Cross Site Tracing Cross Site Tracing (XST) enables an adversary to steal the victim's session cookie and possibly other authentication...
CAPEC-108 — Command Line Execution through SQL Injection An attacker uses standard SQL injection methods to inject data into the command line for execution. This could be...
CAPEC-109 — Object Relational Mapping Injection An attacker leverages a weakness present in the database access layer code generated with an Object Relational...
CAPEC-11 — Cause Web Server Misclassification An attack of this type exploits a Web server's decision to take action based on filename or file extension. Because...
CAPEC-110 — SQL Injection through SOAP Parameter Tampering An attacker modifies the parameters of the SOAP message that is sent from the service consumer to the service...
CAPEC-111 — JSON Hijacking (aka JavaScript Hijacking) An attacker targets a system that uses JavaScript Object Notation (JSON) as a transport mechanism between the client...
CAPEC-112 — Brute Force In this attack, some asset (information, functionality, identity, etc.) is protected by a finite secret value. The...
CAPEC-113 — Interface Manipulation An adversary manipulates the use or processing of an interface (e.g. Application Programming Interface (API) or...
CAPEC-114 — Authentication Abuse An attacker obtains unauthorized access to an application, service or device either through knowledge of the...
CAPEC-115 — Authentication Bypass An attacker gains access to application, service, or device with the privileges of an authorized or privileged user...
CAPEC-116 — Excavation An adversary actively probes the target in a manner that is designed to solicit information that could be leveraged...
CAPEC-117 — Interception An adversary monitors data streams to or from the target for information gathering purposes. This attack may be...
CAPEC-12 — Choosing Message Identifier This pattern of attack is defined by the selection of messages distributed via multicast or public information...
CAPEC-120 — Double Encoding The adversary utilizes a repeating of the encoding process for a set of characters (that is, character encoding a...
CAPEC-121 — Exploit Non-Production Interfaces An adversary exploits a sample, demonstration, test, or debug interface that is unintentionally enabled on a...
CAPEC-122 — Privilege Abuse An adversary is able to exploit features of the target that should be reserved for privileged users or...
CAPEC-123 — Buffer Manipulation An adversary manipulates an application's interaction with a buffer in an attempt to read or modify data they...
CAPEC-124 — Shared Resource Manipulation An adversary exploits a resource shared between multiple applications, an application pool or hardware pin...
CAPEC-125 — Flooding An adversary consumes the resources of a target by rapidly engaging in a large number of interactions with the...
CAPEC-126 — Path Traversal An adversary uses path manipulation methods to exploit insufficient input validation of a target to obtain access to...
CAPEC-127 — Directory Indexing An adversary crafts a request to a target that results in the target listing/indexing the content of a directory as...
CAPEC-128 — Integer Attacks An attacker takes advantage of the structure of integer variables to cause these variables to assume values that are...
CAPEC-129 — Pointer Manipulation This attack pattern involves an adversary manipulating a pointer within a target application resulting in the...
CAPEC-13 — Subverting Environment Variable Values The adversary directly or indirectly modifies environment variables used by or controlling the target software. The...
CAPEC-130 — Excessive Allocation An adversary causes the target to allocate excessive resources to servicing the attackers' request, thereby reducing...
CAPEC-131 — Resource Leak Exposure An adversary utilizes a resource leak on the target to deplete the quantity of the resource available to service...
CAPEC-132 — Symlink Attack An adversary positions a symbolic link in such a manner that the targeted user or application accesses the link's...
CAPEC-133 — Try All Common Switches An attacker attempts to invoke all common switches and options in the target application for the purpose of...
CAPEC-134 — Email Injection An adversary manipulates the headers and content of an email message by injecting data via the use of delimiter...
CAPEC-135 — Format String Injection An adversary includes formatting characters in a string input field on the target application. Most applications...
CAPEC-136 — LDAP Injection An attacker manipulates or crafts an LDAP query for the purpose of undermining the security of the target. Some...
CAPEC-137 — Parameter Injection An adversary manipulates the content of request parameters for the purpose of undermining the security of the...
CAPEC-138 — Reflection Injection An adversary supplies a value to the target application which is then used by reflection methods to identify a...
CAPEC-139 — Relative Path Traversal An attacker exploits a weakness in input validation on the target by supplying a specially constructed path...
CAPEC-14 — Client-side Injection-induced Buffer Overflow This type of attack exploits a buffer overflow vulnerability in targeted client software through injection of...
CAPEC-140 — Bypassing of Intermediate Forms in Multiple-Form Sets Some web applications require users to submit information through an ordered sequence of web forms. This is often...
CAPEC-141 — Cache Poisoning An attacker exploits the functionality of cache technologies to cause specific data to be cached that aids the...
CAPEC-142 — DNS Cache Poisoning A domain name server translates a domain name (such as www.example.com) into an IP address that Internet hosts use...
CAPEC-143 — Detect Unpublicized Web Pages An adversary searches a targeted web site for web pages that have not been publicized. In doing this, the adversary...
CAPEC-144 — Detect Unpublicized Web Services An adversary searches a targeted web site for web services that have not been publicized. This attack can be...
CAPEC-145 — Checksum Spoofing An adversary spoofs a checksum message for the purpose of making a payload appear to have a valid corresponding...
CAPEC-146 — XML Schema Poisoning An adversary corrupts or modifies the content of XML schema information passed between a client and server for the...
CAPEC-147 — XML Ping of the Death An attacker initiates a resource depletion attack where a large number of small XML messages are delivered at a...
CAPEC-148 — Content Spoofing An adversary modifies content to make it contain something other than what the original content producer intended...
CAPEC-149 — Explore for Predictable Temporary File Names An attacker explores a target to identify the names and locations of predictable temporary files for the purpose of...
CAPEC-15 — Command Delimiters An attack of this type exploits a programs' vulnerabilities that allows an attacker's commands to be concatenated...
CAPEC-150 — Collect Data from Common Resource Locations An adversary exploits well-known locations for resources for the purposes of undermining the security of the target....
CAPEC-151 — Identity Spoofing Identity Spoofing refers to the action of assuming (i.e., taking on) the identity of some other entity (human or...
CAPEC-153 — Input Data Manipulation An attacker exploits a weakness in input validation by controlling the format, structure, and composition of data to...
CAPEC-154 — Resource Location Spoofing An adversary deceives an application or user and convinces them to request a resource from an unintended location....
CAPEC-155 — Screen Temporary Files for Sensitive Information An adversary exploits the temporary, insecure storage of information by monitoring the content of files used to...
CAPEC-157 — Sniffing Attacks In this attack pattern, the adversary intercepts information transmitted between two third parties. The adversary...
CAPEC-158 — Sniffing Network Traffic In this attack pattern, the adversary monitors network traffic between nodes of a public or multicast network in an...
CAPEC-159 — Redirect Access to Libraries An adversary exploits a weakness in the way an application searches for external libraries to manipulate the...
CAPEC-16 — Dictionary-based Password Attack An attacker tries each of the words in a dictionary as passwords to gain access to the system via some user's...
CAPEC-160 — Exploit Script-Based APIs Some APIs support scripting instructions as arguments. Methods that take scripted instructions (or references to...
CAPEC-161 — Infrastructure Manipulation An attacker exploits characteristics of the infrastructure of a network entity in order to perpetrate attacks or...
CAPEC-162 — Manipulating Hidden Fields An adversary exploits a weakness in the server's trust of client-side processing by modifying data on the...
CAPEC-163 — Spear Phishing An adversary targets a specific user or group with a Phishing (CAPEC-98) attack tailored to a category of users in...
CAPEC-164 — Mobile Phishing An adversary targets mobile phone users with a phishing attack for the purpose of soliciting account passwords or...
CAPEC-165 — File Manipulation An attacker modifies file contents or attributes (such as extensions or names) of files in a manner to cause...
CAPEC-166 — Force the System to Reset Values An attacker forces the target into a previous state in order to leverage potential weaknesses in the target...
CAPEC-167 — White Box Reverse Engineering An attacker discovers the structure, function, and composition of a type of computer software through white box...
CAPEC-168 — Windows ::DATA Alternate Data Stream An attacker exploits the functionality of Microsoft NTFS Alternate Data Streams (ADS) to undermine system security....
CAPEC-169 — Footprinting An adversary engages in probing and exploration activities to identify constituents and properties of the target.
CAPEC-17 — Using Malicious Files An attack of this type exploits a system's configuration that allows an adversary to either directly access an...
CAPEC-170 — Web Application Fingerprinting An attacker sends a series of probes to a web application in order to elicit version-dependent and type-dependent...
CAPEC-173 — Action Spoofing An adversary is able to disguise one action for another and therefore trick a user into initiating one type of...
CAPEC-174 — Flash Parameter Injection An adversary takes advantage of improper data validation to inject malicious global parameters into a Flash file...
CAPEC-175 — Code Inclusion An adversary exploits a weakness on the target to force arbitrary code to be retrieved locally or from a remote...
CAPEC-176 — Configuration/Environment Manipulation An attacker manipulates files or settings external to a target application which affect the behavior of that...
CAPEC-177 — Create files with the same name as files protected with a higher classification An attacker exploits file location algorithms in an operating system or application by creating a file with the same...
CAPEC-178 — Cross-Site Flashing An attacker is able to trick the victim into executing a Flash document that passes commands or calls to a Flash...
CAPEC-179 — Calling Micro-Services Directly An attacker is able to discover and query Micro-services at a web location and thereby expose the Micro-services to...
CAPEC-18 — XSS Targeting Non-Script Elements This attack is a form of Cross-Site Scripting (XSS) where malicious scripts are embedded in elements that are not...
CAPEC-180 — Exploiting Incorrectly Configured Access Control Security Levels An attacker exploits a weakness in the configuration of access controls and is able to bypass the intended...
CAPEC-181 — Flash File Overlay An attacker creates a transparent overlay using flash in order to intercept user actions for the purpose of...
CAPEC-182 — Flash Injection An attacker tricks a victim to execute malicious flash content that executes commands or makes flash calls specified...
CAPEC-183 — IMAP/SMTP Command Injection An adversary exploits weaknesses in input validation on web-mail servers to execute commands on the IMAP/SMTP...
CAPEC-184 — Software Integrity Attack An attacker initiates a series of events designed to cause a user, program, server, or device to perform actions...
CAPEC-185 — Malicious Software Download An attacker uses deceptive methods to cause a user or an automated process to download and install dangerous code...
CAPEC-186 — Malicious Software Update An adversary uses deceptive methods to cause a user or an automated process to download and install dangerous code...
CAPEC-187 — Malicious Automated Software Update via Redirection An attacker exploits two layers of weaknesses in server or client software for automated update mechanisms to...
CAPEC-188 — Reverse Engineering An adversary discovers the structure, function, and composition of an object, resource, or system by using a variety...
CAPEC-189 — Black Box Reverse Engineering An adversary discovers the structure, function, and composition of a type of computer software through black box...
CAPEC-19 — Embedding Scripts within Scripts An adversary leverages the capability to execute their own script by embedding it within other scripts that the...
CAPEC-190 — Reverse Engineer an Executable to Expose Assumed Hidden Functionality An attacker analyzes a binary file or executable for the purpose of discovering the structure, function, and...
CAPEC-191 — Read Sensitive Constants Within an Executable An adversary engages in activities to discover any sensitive constants present within the compiled code of an...
CAPEC-192 — Protocol Analysis An adversary engages in activities to decipher and/or decode protocol information for a network or application...
CAPEC-193 — PHP Remote File Inclusion In this pattern the adversary is able to load and execute arbitrary code remotely available from the application....
CAPEC-194 — Fake the Source of Data An adversary takes advantage of improper authentication to provide data or services under a falsified identity. The...
CAPEC-195 — Principal Spoof A Principal Spoof is a form of Identity Spoofing where an adversary pretends to be some other person in an...

Browse by topic

Every page in the corpus, grouped. Search finds one page; this shows what else is here.