Attack patterns (CAPEC)

558 pages, showing 501–558, ordered by identifier.

CAPEC-670 — Software Development Tools Maliciously Altered An adversary with the ability to alter tools used in a development environment causes software to be developed with...
CAPEC-671 — Requirements for ASIC Functionality Maliciously Altered An adversary with access to functional requirements for an application specific integrated circuit (ASIC), a chip...
CAPEC-672 — Malicious Code Implanted During Chip Programming During the programming step of chip manufacture, an adversary with access and necessary technical skills maliciously...
CAPEC-673 — Developer Signing Maliciously Altered Software Software produced by a reputable developer is clandestinely infected with malicious code and then digitally signed...
CAPEC-674 — Design for FPGA Maliciously Altered An adversary alters the functionality of a field-programmable gate array (FPGA) by causing an FPGA configuration...
CAPEC-675 — Retrieve Data from Decommissioned Devices An adversary obtains decommissioned, recycled, or discarded systems and devices that can include an organization’s...
CAPEC-676 — NoSQL Injection An adversary targets software that constructs NoSQL statements based on user input or with parameters vulnerable to...
CAPEC-677 — Server Motherboard Compromise Malware is inserted in a server motherboard (e.g., in the flash memory) in order to alter server functionality from...
CAPEC-678 — System Build Data Maliciously Altered During the system build process, the system is deliberately misconfigured by the alteration of the build data....
CAPEC-679 — Exploitation of Improperly Configured or Implemented Memory Protections An adversary takes advantage of missing or incorrectly configured access control within memory to read/write data or...
CAPEC-68 — Subvert Code-signing Facilities Many languages use code signing facilities to vouch for code's identity and to thus tie code to its assigned...
CAPEC-680 — Exploitation of Improperly Controlled Registers An adversary exploits missing or incorrectly configured access control within registers to read/write data that is...
CAPEC-681 — Exploitation of Improperly Controlled Hardware Security Identifiers An adversary takes advantage of missing or incorrectly configured security identifiers (e.g., tokens), which are...
CAPEC-682 — Exploitation of Firmware or ROM Code with Unpatchable Vulnerabilities An adversary may exploit vulnerable code (i.e., firmware or ROM) that is unpatchable. Unpatchable devices exist due...
CAPEC-69 — Target Programs with Elevated Privileges This attack targets programs running with elevated privileges. The adversary tries to leverage a vulnerability in...
CAPEC-690 — Metadata Spoofing An adversary alters the metadata of a resource (e.g., file, directory, repository, etc.) to present a malicious...
CAPEC-691 — Spoof Open-Source Software Metadata An adversary spoofs open-source software metadata in an attempt to masquerade malicious software as popular,...
CAPEC-692 — Spoof Version Control System Commit Metadata An adversary spoofs metadata pertaining to a Version Control System (VCS) (e.g., Git) repository's commits to...
CAPEC-693 — StarJacking An adversary spoofs software popularity metadata to deceive users into believing that a maliciously provided package...
CAPEC-694 — System Location Discovery An adversary collects information about the target system in an attempt to identify the system's geographical...
CAPEC-695 — Repo Jacking An adversary takes advantage of the redirect property of directly linked Version Control System (VCS) repositories...
CAPEC-696 — Load Value Injection An adversary exploits a hardware design flaw in a CPU implementation of transient instruction execution in which a...
CAPEC-697 — DHCP Spoofing An adversary masquerades as a legitimate Dynamic Host Configuration Protocol (DHCP) server by spoofing DHCP traffic,...
CAPEC-698 — Install Malicious Extension An adversary directly installs or tricks a user into installing a malicious extension into existing trusted...
CAPEC-699 — Eavesdropping on a Monitor An Adversary can eavesdrop on the content of an external monitor through the air without modifying any cable or...
CAPEC-7 — Blind SQL Injection Blind SQL Injection results from an insufficient mitigation for SQL Injection. Although suppressing database error...
CAPEC-70 — Try Common or Default Usernames and Passwords An adversary may try certain common or default usernames and passwords to gain access into the system and perform...
CAPEC-700 — Network Boundary Bridging An adversary which has gained elevated access to network boundary devices may use these devices to create a channel...
CAPEC-701 — Browser in the Middle (BiTM) An adversary exploits the inherent functionalities of a web browser, in order to establish an unnoticed remote...
CAPEC-702 — Exploiting Incorrect Chaining or Granularity of Hardware Debug Components An adversary exploits incorrect chaining or granularity of hardware debug components in order to gain unauthorized...
CAPEC-71 — Using Unicode Encoding to Bypass Validation Logic An attacker may provide a Unicode string to a system component that is not Unicode aware and use that to circumvent...
CAPEC-72 — URL Encoding This attack targets the encoding of the URL. An adversary can take advantage of the multiple way of encoding an URL...
CAPEC-73 — User-Controlled Filename An attack of this type involves an adversary inserting malicious characters (such as a XSS redirection) into a...
CAPEC-74 — Manipulating State The adversary modifies state information maintained by the target software or causes a state transition in hardware....
CAPEC-75 — Manipulating Writeable Configuration Files Generally these are manually edited files that are not in the preview of the system administrators, any ability on...
CAPEC-76 — Manipulating Web Input to File System Calls An attacker manipulates inputs to the target software which the target software passes to file system calls in the...
CAPEC-77 — Manipulating User-Controlled Variables This attack targets user controlled variables (DEBUG=1, PHP Globals, and So Forth). An adversary can override...
CAPEC-78 — Using Escaped Slashes in Alternate Encoding This attack targets the use of the backslash in alternate encoding. An adversary can provide a backslash as a...
CAPEC-79 — Using Slashes in Alternate Encoding This attack targets the encoding of the Slash characters. An adversary would try to exploit common filtering...
CAPEC-8 — Buffer Overflow in an API Call This attack targets libraries or shared code modules which are vulnerable to buffer overflow attacks. An adversary...
CAPEC-80 — Using UTF-8 Encoding to Bypass Validation Logic This attack is a specific variation on leveraging alternate encodings to bypass validation logic. This attack...
CAPEC-81 — Web Server Logs Tampering Web Logs Tampering attacks involve an attacker injecting, deleting or otherwise tampering with the contents of web...
CAPEC-83 — XPath Injection An attacker can craft special user-controllable input consisting of XPath expressions to inject the XML database and...
CAPEC-84 — XQuery Injection This attack utilizes XQuery to probe and attack server systems; in a similar manner that SQL Injection allows an...
CAPEC-85 — AJAX Footprinting This attack utilizes the frequent client-server roundtrips in Ajax conversation to scan a system. While Ajax does...
CAPEC-86 — XSS Through HTTP Headers An adversary exploits web applications that generate web content, such as links in a HTML page, based on unvalidated...
CAPEC-87 — Forceful Browsing An attacker employs forceful browsing (direct URL entry) to access portions of a website that are otherwise...
CAPEC-88 — OS Command Injection In this type of an attack, an adversary injects operating system commands into existing application functions. An...
CAPEC-89 — Pharming A pharming attack occurs when the victim is fooled into entering sensitive data into supposedly trusted locations,...
CAPEC-9 — Buffer Overflow in Local Command-Line Utilities This attack targets command-line utilities available in a number of shells. An adversary can leverage a...
CAPEC-90 — Reflection Attack in Authentication Protocol An adversary can abuse an authentication protocol susceptible to reflection attack in order to defeat it. Doing so...
CAPEC-92 — Forced Integer Overflow This attack forces an integer variable to go out of range. The integer variable is often used as an offset such as...
CAPEC-93 — Log Injection-Tampering-Forging This attack targets the log files of the target host. The attacker injects, manipulates or forges malicious log...
CAPEC-94 — Adversary in the Middle (AiTM) An adversary targets the communication between two components (typically client and server), in order to alter or...
CAPEC-95 — WSDL Scanning This attack targets the WSDL interface made available by a web service. The attacker may scan the WSDL interface to...
CAPEC-96 — Block Access to Libraries An application typically makes calls to functions that are a part of libraries external to the application. These...
CAPEC-97 — Cryptanalysis Cryptanalysis is a process of finding weaknesses in cryptographic algorithms and using these weaknesses to decipher...
CAPEC-98 — Phishing Phishing is a social engineering technique where an attacker masquerades as a legitimate entity with which the...

Browse by topic

Every page in the corpus, grouped. Search finds one page; this shows what else is here.