615 indexed

CAPECCAPEC attack patterns

615 MITRE CAPEC entries — attack patterns at meta, standard, and detailed abstraction levels. Filter by abstraction. Authored by Adam Lundqvist.

Showing 251–300 of 341 in Detailed · page 6 of 7

IDTitleSummary
CAPEC-591Reflected XSSThis type of attack is a form of Cross-Site Scripting (XSS) where a malicious script is "reflected" off a vulnerable web application and then executed by a vic…
CAPEC-592Stored XSSAn adversary utilizes a form of Cross-site Scripting (XSS) where a malicious script is persistently "stored" within the data storage of a vulnerable web applic…
CAPEC-596TCP RST InjectionAn adversary injects one or more TCP RST packets to a target after the target has made a HTTP GET request. The goal of this attack is to have the target and/or…
CAPEC-597Absolute Path TraversalAn adversary with access to file system resources, either directly or via application logic, will use various file absolute paths and navigation mechanisms suc…
CAPEC-598DNS SpoofingAn adversary sends a malicious ("NXDOMAIN" ("No such domain") code, or DNS A record) response to a target's route request before a legitimate resolver can. Thi…
CAPEC-599Terrestrial JammingIn this attack pattern, the adversary transmits disruptive signals in the direction of the target's consumer-level satellite dish (as opposed to the satellite …
CAPEC-60Reusing Session IDs (aka Session Replay)This attack targets the reuse of valid session ID to spoof the target system in order to gain privileges. The attacker tries to reuse a stolen session ID used …
CAPEC-604Wi-Fi JammingIn this attack scenario, the attacker actively transmits on the Wi-Fi channel to prevent users from transmitting or receiving data from the targeted Wi-Fi netw…
CAPEC-605Cellular JammingIn this attack scenario, the attacker actively transmits signals to overpower and disrupt the communication between a cellular user device and a cell tower. Se…
CAPEC-606Weakening of Cellular EncryptionAn attacker, with control of a Cellular Rogue Base Station or through cooperation with a Malicious Mobile Network Operator can force the mobile device (e.g., t…
CAPEC-608Cryptanalysis of Cellular EncryptionThe use of cryptanalytic techniques to derive cryptographic keys or otherwise effectively defeat cellular encryption to reveal traffic content. Some cellular e…
CAPEC-609Cellular Traffic InterceptCellular traffic for voice and data from mobile devices and retransmission devices can be intercepted via numerous methods. Malicious actors can deploy their o…
CAPEC-61Session FixationThe attacker induces a client to establish a session with the target software using a session identifier provided by the attacker. Once the user successfully a…
CAPEC-611BitSquattingAn adversary registers a domain name one bit different than a trusted domain. A BitSquatting attack leverages random errors in memory to direct Internet traffi…
CAPEC-612WiFi MAC Address TrackingIn this attack scenario, the attacker passively listens for WiFi messages and logs the associated Media Access Control (MAC) addresses. These addresses are int…
CAPEC-613WiFi SSID TrackingIn this attack scenario, the attacker passively listens for WiFi management frame messages containing the Service Set Identifier (SSID) for the WiFi network. T…
CAPEC-614Rooting SIM CardsSIM cards are the de facto trust anchor of mobile devices worldwide. The cards protect the mobile identity of subscribers, associate devices with phone numbers…
CAPEC-615Evil Twin Wi-Fi AttackAdversaries install Wi-Fi equipment that acts as a legitimate Wi-Fi network access point. When a device connects to this access point, Wi-Fi data traffic is in…
CAPEC-617Cellular Rogue Base StationIn this attack scenario, the attacker imitates a cellular base station with their own "rogue" base station equipment. Since cellular devices connect to whateve…
CAPEC-618Cellular Broadcast Message RequestIn this attack scenario, the attacker uses knowledge of the target’s mobile phone number (i.e., the number associated with the SIM used in the retransmission d…
CAPEC-619Signal Strength TrackingIn this attack scenario, the attacker passively monitors the signal strength of the target’s cellular RF signal or WiFi RF signal and uses the strength of the …
CAPEC-621Analysis of Packet Timing and SizesAn attacker may intercept and log encrypted transmissions for the purpose of analyzing metadata such as packet timing and sizes. Although the actual data may b…
CAPEC-622Electromagnetic Side-Channel AttackIn this attack scenario, the attacker passively monitors electromagnetic emanations that are produced by the targeted electronic device as an unintentional sid…
CAPEC-623Compromising Emanations AttackCompromising Emanations (CE) are defined as unintentional signals which an attacker may intercept and analyze to disclose the information processed by the targ…
CAPEC-626Smudge AttackAttacks that reveal the password/passcode pattern on a touchscreen device by detecting oil smudges left behind by the user’s fingers. Metadata: detailed CAPEC…
CAPEC-628Carry-Off GPS AttackA common form of a GPS spoofing attack, commonly termed a carry-off attack begins with an adversary broadcasting signals synchronized with the genuine signals …
CAPEC-630TypoSquattingAn adversary registers a domain name with at least one character different than a trusted domain. A TypoSquatting attack takes advantage of instances where a u…
CAPEC-631SoundSquattingAn adversary registers a domain name that sounds the same as a trusted domain, but has a different spelling. A SoundSquatting attack takes advantage of a user'…
CAPEC-632Homograph Attack via HomoglyphsAn adversary registers a domain name containing a homoglyph, leading the registered domain to appear the same as a trusted domain. A homograph attack leverages…
CAPEC-633Token ImpersonationAn adversary exploits a weakness in authentication to create an access token (or equivalent) that impersonates a different entity, and then associates a proces…
CAPEC-634Probe Audio and Video PeripheralsThe adversary exploits the target system's audio and video functionalities through malware or scheduled tasks. The goal is to capture sensitive information abo…
CAPEC-637Collect Data from ClipboardThe adversary exploits an application that allows for the copying of sensitive data or information by collecting information copied to the clipboard. Data copi…
CAPEC-638Altered Component FirmwareAn adversary exploits systems features and/or improperly protected firmware of hardware components, such as Hard Disk Drives (HDD), with the goal of executing …
CAPEC-639Probe System FilesAn adversary obtains unauthorized information due to improperly protected files. If an application stores sensitive information in a file that is not protected…
CAPEC-64Using Slashes and URL Encoding Combined to Bypass Validation LogicThis attack targets the encoding of the URL combined with the encoding of the slash characters. An attacker can take advantage of the multiple ways of encoding…
CAPEC-640Inclusion of Code in Existing ProcessThe adversary takes advantage of a bug in an application failing to verify the integrity of the running process to execute arbitrary code in the address space …
CAPEC-641DLL Side-LoadingAn adversary places a malicious version of a Dynamic-Link Library (DLL) in the Windows Side-by-Side (WinSxS) directory to trick the operating system into loadi…
CAPEC-642Replace BinariesAdversaries know that certain binaries will be regularly executed as part of normal processing. If these binaries are not protected with the appropriate file s…
CAPEC-643Identify Shared Files/Directories on SystemAn adversary discovers connections between systems by exploiting the target system's standard practice of revealing them in searchable, common areas. Through t…
CAPEC-644Use of Captured Hashes (Pass The Hash)An adversary obtains (i.e. steals or purchases) legitimate Windows domain credential hash values to access systems within the domain that leverage the Lan Man …
CAPEC-645Use of Captured Tickets (Pass The Ticket)An adversary uses stolen Kerberos tickets to access systems/resources that leverage the Kerberos authentication protocol. The Kerberos authentication protocol …
CAPEC-647Collect Data from RegistriesAn adversary exploits a weakness in authorization to gather system-specific data and sensitive information within a registry (e.g., Windows Registry, Mac plist…
CAPEC-648Collect Data from Screen CaptureAn adversary gathers sensitive information by exploiting the system's screen capture functionality. Through screenshots, the adversary aims to see what happens…
CAPEC-649Adding a Space to a File ExtensionAn adversary adds a space character to the end of a file extension and takes advantage of an application that does not properly neutralize trailing special ele…
CAPEC-65Sniff Application CodeAn adversary passively sniffs network communications and captures application code bound for an authorized client. Once obtained, they can use it as-is, or thr…
CAPEC-650Upload a Web Shell to a Web ServerBy exploiting insufficient permissions, it is possible to upload a web shell to a web server in such a way that it can be executed remotely. This shell can hav…
CAPEC-654Credential Prompt ImpersonationAn adversary, through a previously installed malicious application, impersonates a credential prompt in an attempt to steal a user's credentials. Metadata: de…
CAPEC-655Avoid Security Tool Identification by Adding DataMetadata: detailed CAPEC pattern, status draft, likelihood high, severity high. Mapped ATT&CK technique: [object Object]. Related CAPEC pattern: [object Object…
CAPEC-656Voice PhishingAn adversary targets users with a phishing attack for the purpose of soliciting account passwords or sensitive information from the user. Voice Phishing is a v…
CAPEC-657Malicious Automated Software Update via SpoofingAn attackers uses identify or content spoofing to trick a client into performing an automated software update from a malicious source. A malicious automated so…
Sourced from MITRE CAPEC. Curated by Adam Lundqvist, Founder at SQUR.
MITRE CAPEC attack patterns — by abstraction | SQUR Knowledge Base