AttackPattern

615 metadata records. Search and filter

1. Accessing Functionality Not Properly Constrained by ACLs
   capec.xml · AttackPattern · Year unknown
2. Buffer Overflow via Environment Variables
   capec.xml · AttackPattern · Year unknown
3. Overflow Buffers
   capec.xml · AttackPattern · Year unknown
4. Server Side Include (SSI) Injection
   capec.xml · AttackPattern · Year unknown
5. Session Sidejacking
   capec.xml · AttackPattern · Year unknown
6. Clickjacking
   capec.xml · AttackPattern · Year unknown
7. Cross Zone Scripting
   capec.xml · AttackPattern · Year unknown
8. HTTP Request Splitting
   capec.xml · AttackPattern · Year unknown
9. DEPRECATED: XSS through Log Files
   capec.xml · AttackPattern · Year unknown
10. Cross Site Tracing
    capec.xml · AttackPattern · Year unknown
11. Command Line Execution through SQL Injection
    capec.xml · AttackPattern · Year unknown
12. Object Relational Mapping Injection
    capec.xml · AttackPattern · Year unknown
13. Cause Web Server Misclassification
    capec.xml · AttackPattern · Year unknown
14. SQL Injection through SOAP Parameter Tampering
    capec.xml · AttackPattern · Year unknown
15. JSON Hijacking (aka JavaScript Hijacking)
    capec.xml · AttackPattern · Year unknown
16. Brute Force
    capec.xml · AttackPattern · Year unknown
17. Interface Manipulation
    capec.xml · AttackPattern · Year unknown
18. Authentication Abuse
    capec.xml · AttackPattern · Year unknown
19. Authentication Bypass
    capec.xml · AttackPattern · Year unknown
20. Excavation
    capec.xml · AttackPattern · Year unknown
21. Interception
    capec.xml · AttackPattern · Year unknown
22. Choosing Message Identifier
    capec.xml · AttackPattern · Year unknown
23. Double Encoding
    capec.xml · AttackPattern · Year unknown
24. Exploit Non-Production Interfaces
    capec.xml · AttackPattern · Year unknown
25. Privilege Abuse
    capec.xml · AttackPattern · Year unknown
26. Buffer Manipulation
    capec.xml · AttackPattern · Year unknown
27. Shared Resource Manipulation
    capec.xml · AttackPattern · Year unknown
28. Flooding
    capec.xml · AttackPattern · Year unknown
29. Path Traversal
    capec.xml · AttackPattern · Year unknown
30. Directory Indexing
    capec.xml · AttackPattern · Year unknown
31. Integer Attacks
    capec.xml · AttackPattern · Year unknown
32. Pointer Manipulation
    capec.xml · AttackPattern · Year unknown
33. Subverting Environment Variable Values
    capec.xml · AttackPattern · Year unknown
34. Excessive Allocation
    capec.xml · AttackPattern · Year unknown
35. Resource Leak Exposure
    capec.xml · AttackPattern · Year unknown
36. Symlink Attack
    capec.xml · AttackPattern · Year unknown
37. Try All Common Switches
    capec.xml · AttackPattern · Year unknown
38. Email Injection
    capec.xml · AttackPattern · Year unknown
39. Format String Injection
    capec.xml · AttackPattern · Year unknown
40. LDAP Injection
    capec.xml · AttackPattern · Year unknown
41. Parameter Injection
    capec.xml · AttackPattern · Year unknown
42. Reflection Injection
    capec.xml · AttackPattern · Year unknown
43. Relative Path Traversal
    capec.xml · AttackPattern · Year unknown
44. Client-side Injection-induced Buffer Overflow
    capec.xml · AttackPattern · Year unknown
45. Bypassing of Intermediate Forms in Multiple-Form Sets
    capec.xml · AttackPattern · Year unknown
46. Cache Poisoning
    capec.xml · AttackPattern · Year unknown
47. DNS Cache Poisoning
    capec.xml · AttackPattern · Year unknown
48. Detect Unpublicized Web Pages
    capec.xml · AttackPattern · Year unknown
49. Detect Unpublicized Web Services
    capec.xml · AttackPattern · Year unknown
50. Checksum Spoofing
    capec.xml · AttackPattern · Year unknown
51. XML Schema Poisoning
    capec.xml · AttackPattern · Year unknown
52. XML Ping of the Death
    capec.xml · AttackPattern · Year unknown
53. Content Spoofing
    capec.xml · AttackPattern · Year unknown
54. Explore for Predictable Temporary File Names
    capec.xml · AttackPattern · Year unknown
55. Command Delimiters
    capec.xml · AttackPattern · Year unknown
56. Collect Data from Common Resource Locations
    capec.xml · AttackPattern · Year unknown
57. Identity Spoofing
    capec.xml · AttackPattern · Year unknown
58. Input Data Manipulation
    capec.xml · AttackPattern · Year unknown
59. Resource Location Spoofing
    capec.xml · AttackPattern · Year unknown
60. Screen Temporary Files for Sensitive Information
    capec.xml · AttackPattern · Year unknown
61. Sniffing Attacks
    capec.xml · AttackPattern · Year unknown
62. Sniffing Network Traffic
    capec.xml · AttackPattern · Year unknown
63. Redirect Access to Libraries
    capec.xml · AttackPattern · Year unknown
64. Dictionary-based Password Attack
    capec.xml · AttackPattern · Year unknown
65. Exploit Script-Based APIs
    capec.xml · AttackPattern · Year unknown
66. Infrastructure Manipulation
    capec.xml · AttackPattern · Year unknown
67. Manipulating Hidden Fields
    capec.xml · AttackPattern · Year unknown
68. Spear Phishing
    capec.xml · AttackPattern · Year unknown
69. Mobile Phishing
    capec.xml · AttackPattern · Year unknown
70. File Manipulation
    capec.xml · AttackPattern · Year unknown
71. Force the System to Reset Values
    capec.xml · AttackPattern · Year unknown
72. White Box Reverse Engineering
    capec.xml · AttackPattern · Year unknown
73. Windows ::DATA Alternate Data Stream
    capec.xml · AttackPattern · Year unknown
74. Footprinting
    capec.xml · AttackPattern · Year unknown
75. Using Malicious Files
    capec.xml · AttackPattern · Year unknown
76. Web Application Fingerprinting
    capec.xml · AttackPattern · Year unknown
77. DEPRECATED: Variable Manipulation
    capec.xml · AttackPattern · Year unknown
78. Action Spoofing
    capec.xml · AttackPattern · Year unknown
79. Flash Parameter Injection
    capec.xml · AttackPattern · Year unknown
80. Code Inclusion
    capec.xml · AttackPattern · Year unknown
81. Configuration/Environment Manipulation
    capec.xml · AttackPattern · Year unknown
82. Create files with the same name as files protected with a higher classification
    capec.xml · AttackPattern · Year unknown
83. Cross-Site Flashing
    capec.xml · AttackPattern · Year unknown
84. Calling Micro-Services Directly
    capec.xml · AttackPattern · Year unknown
85. XSS Targeting Non-Script Elements
    capec.xml · AttackPattern · Year unknown
86. Exploiting Incorrectly Configured Access Control Security Levels
    capec.xml · AttackPattern · Year unknown
87. Flash File Overlay
    capec.xml · AttackPattern · Year unknown
88. Flash Injection
    capec.xml · AttackPattern · Year unknown
89. IMAP/SMTP Command Injection
    capec.xml · AttackPattern · Year unknown
90. Software Integrity Attack
    capec.xml · AttackPattern · Year unknown
91. Malicious Software Download
    capec.xml · AttackPattern · Year unknown
92. Malicious Software Update
    capec.xml · AttackPattern · Year unknown
93. Malicious Automated Software Update via Redirection
    capec.xml · AttackPattern · Year unknown
94. Reverse Engineering
    capec.xml · AttackPattern · Year unknown
95. Black Box Reverse Engineering
    capec.xml · AttackPattern · Year unknown
96. Embedding Scripts within Scripts
    capec.xml · AttackPattern · Year unknown
97. Reverse Engineer an Executable to Expose Assumed Hidden Functionality
    capec.xml · AttackPattern · Year unknown
98. Read Sensitive Constants Within an Executable
    capec.xml · AttackPattern · Year unknown
99. Protocol Analysis
    capec.xml · AttackPattern · Year unknown
100. PHP Remote File Inclusion
     capec.xml · AttackPattern · Year unknown
101. Fake the Source of Data
     capec.xml · AttackPattern · Year unknown
102. Principal Spoof
     capec.xml · AttackPattern · Year unknown
103. Session Credential Falsification through Forging
     capec.xml · AttackPattern · Year unknown
104. Exponential Data Expansion
     capec.xml · AttackPattern · Year unknown
105. XSS Targeting Error Pages
     capec.xml · AttackPattern · Year unknown
106. XSS Using Alternate Syntax
     capec.xml · AttackPattern · Year unknown
107. Inducing Account Lockout
     capec.xml · AttackPattern · Year unknown
108. Encryption Brute Forcing
     capec.xml · AttackPattern · Year unknown
109. Removal of filters: Input filters, output filters, data masking
     capec.xml · AttackPattern · Year unknown
110. Serialized Data External Linking
     capec.xml · AttackPattern · Year unknown
111. Create Malicious Client
     capec.xml · AttackPattern · Year unknown
112. Manipulate Registry Information
     capec.xml · AttackPattern · Year unknown
113. Lifting Sensitive Data Embedded in Cache
     capec.xml · AttackPattern · Year unknown
114. DEPRECATED: Lifting credential(s)/key material embedded in client distributions (thick or thin)
     capec.xml · AttackPattern · Year unknown
115. Signing Malicious Code
     capec.xml · AttackPattern · Year unknown
116. Removing Important Client Functionality
     capec.xml · AttackPattern · Year unknown
117. Removing/short-circuiting 'Purse' logic: removing/mutating 'cash' decrements
     capec.xml · AttackPattern · Year unknown
118. XSS Using MIME Type Mismatch
     capec.xml · AttackPattern · Year unknown
119. Exploitation of Trusted Identifiers
     capec.xml · AttackPattern · Year unknown
120. DEPRECATED: Leveraging web tools (e.g. Mozilla's GreaseMonkey, Firebug) to change application behavior
     capec.xml · AttackPattern · Year unknown