CAPEC-3000 - Attack Pattern Details | CVE Find

Vendors and Products

CPE, which stands for Common Platform Enumeration, is a standardized scheme for naming hardware, software, and operating systems. CPE provides a structured naming scheme to uniquely identify and classify information technology systems, platforms, and packages based on certain attributes such as vendor, product name, version, update, edition, and language.

CAPEC-3000

Name

Domains of Attack

Status

Draft

Type

Graph

Published

2014-06-23
00h00 +00:00

Modified

2018-07-31
00h00 +00:00

Official links

CAPEC Mitre.org

Alerte pour un CAPEC

Stay informed of any changes for a specific CAPEC.

Notifications manage

List of Notifications

Alerte pour un CAPEC

Stay informed of any changes for a specific CAPEC.

Parameters

You can specify a title that will be retrieved in the alerts that will be sent out.

Specify the CAPEC ID you wish to monitor.

Planning

Month

Next run calculation

Day

Weekday

Hour

Minute

Creation date

-

Last execution

-

Next execution

-

Functionality requiring a connection

This feature, which allows you to receive alerts, is only active when you are logged into your account.

Name: Domains of Attack

This view organizes attack patterns hierarchically based on the attack domain.

CAPEC Members

CAPEC-513: Software Category

CAPEC-513: Attack patterns within this category focus on the exploitation of software applications. The techniques defined by each pattern are used to exploit these weaknesses in the application's design or implementation in an attempt to achieve a desired negative technical impact.

CAPEC-21: Exploitation of Trusted Identifiers Base

CAPEC-22: Exploiting Trust in Client Base

CAPEC-25: Forced Deadlock Base

CAPEC-26: Leveraging Race Conditions Base

CAPEC-28: Fuzzing Base

CAPEC-74: Manipulating State Base

CAPEC-94: Adversary in the Middle (AiTM) Base

CAPEC-112: Brute Force Base

CAPEC-113: Interface Manipulation Base

CAPEC-114: Authentication Abuse Base

CAPEC-115: Authentication Bypass Base

CAPEC-116: Excavation Base

CAPEC-117: Interception Base

CAPEC-122: Privilege Abuse Base

CAPEC-123: Buffer Manipulation Base

CAPEC-124: Shared Resource Manipulation Base

CAPEC-125: Flooding Base

CAPEC-129: Pointer Manipulation Base

CAPEC-130: Excessive Allocation Base

CAPEC-131: Resource Leak Exposure Base

CAPEC-137: Parameter Injection Base

CAPEC-148: Content Spoofing Base

CAPEC-151: Identity Spoofing Base

CAPEC-153: Input Data Manipulation Base

CAPEC-154: Resource Location Spoofing Base

CAPEC-161: Infrastructure Manipulation Base

CAPEC-165: File Manipulation Base

CAPEC-169: Footprinting Base

CAPEC-173: Action Spoofing Base

CAPEC-175: Code Inclusion Base

CAPEC-176: Configuration/Environment Manipulation Base

CAPEC-184: Software Integrity Attack Base

CAPEC-188: Reverse Engineering Base

CAPEC-212: Functionality Misuse Base

CAPEC-224: Fingerprinting Base

CAPEC-227: Sustained Client Engagement Base

CAPEC-233: Privilege Escalation Base

CAPEC-240: Resource Injection Base

CAPEC-242: Code Injection Base

CAPEC-248: Command Injection Base

CAPEC-272: Protocol Manipulation Base

CAPEC-410: Information Elicitation Base

CAPEC-438: Modification During Manufacture Base

CAPEC-441: Malicious Logic Insertion Base

CAPEC-548: Contaminate Resource Base

CAPEC-549: Local Execution of Code Base

CAPEC-554: Functionality Bypass Base

CAPEC-560: Use of Known Domain Credentials Base

CAPEC-586: Object Injection Base

CAPEC-594: Traffic Injection Base

CAPEC-607: Obstruction Base

CAPEC-690: Metadata Spoofing Base

CAPEC-515: Hardware Category

CAPEC-515: Attack patterns within this category focus on the exploitation of the physical hardware used in computing systems. The techniques defined by each pattern reflect the replacement, destruction, modification and exploitation of hardware components that make up a system in an attempt to achieve a desired negative technical impact. Attacks against hardware component fall into several broad categories depending upon the relative sophistication of the attacker and the type of systems that are targeted. Attacks against hardware components differ from software attacks in that hardware-based attacks target the chips, circuit boards, device ports, or other components that comprise a computer system or embedded system. Sophisticated attacks may involve adding or removing jumpers to an exposed system, or applying sensors to portions of the motherboard to read data as it traverses the system bus.

CAPEC-26: Leveraging Race Conditions Base

CAPEC-74: Manipulating State Base

CAPEC-113: Interface Manipulation Base

CAPEC-114: Authentication Abuse Base

CAPEC-116: Excavation Base

CAPEC-122: Privilege Abuse Base

CAPEC-124: Shared Resource Manipulation Base

CAPEC-148: Content Spoofing Base

CAPEC-151: Identity Spoofing Base

CAPEC-154: Resource Location Spoofing Base

CAPEC-161: Infrastructure Manipulation Base

CAPEC-176: Configuration/Environment Manipulation Base

CAPEC-188: Reverse Engineering Base

CAPEC-192: Protocol Analysis Base

CAPEC-212: Functionality Misuse Base

CAPEC-233: Privilege Escalation Base

CAPEC-438: Modification During Manufacture Base

CAPEC-439: Manipulation During Distribution Base

CAPEC-440: Hardware Integrity Attack Base

CAPEC-441: Malicious Logic Insertion Base

CAPEC-548: Contaminate Resource Base

CAPEC-560: Use of Known Domain Credentials Base

CAPEC-607: Obstruction Base

CAPEC-624: Hardware Fault Injection Base

CAPEC-512: Communications Category

CAPEC-512: Attack patterns within this category focus on the exploitation of communications and related protocols. The techniques defined by each pattern are used by an adversary to block, manipulate, and steal communications in an attempt to achieve a desired negative technical impact.

CAPEC-22: Exploiting Trust in Client Base

CAPEC-94: Adversary in the Middle (AiTM) Base

CAPEC-117: Interception Base

CAPEC-125: Flooding Base

CAPEC-130: Excessive Allocation Base

CAPEC-148: Content Spoofing Base

CAPEC-151: Identity Spoofing Base

CAPEC-154: Resource Location Spoofing Base

CAPEC-161: Infrastructure Manipulation Base

CAPEC-169: Footprinting Base

CAPEC-192: Protocol Analysis Base

CAPEC-216: Communication Channel Manipulation Base

CAPEC-240: Resource Injection Base

CAPEC-272: Protocol Manipulation Base

CAPEC-594: Traffic Injection Base

CAPEC-607: Obstruction Base

CAPEC-624: Hardware Fault Injection Base

CAPEC-437: Supply Chain Category

CAPEC-437: Attack patterns within this category focus on the disruption of the supply chain lifecycle by manipulating computer system hardware, software, or services for the purpose of espionage, theft of critical data or technology, or the disruption of mission-critical operations or infrastructure. Supply chain operations are usually multi-national with parts, components, assembly, and delivery occurring across multiple countries offering an attacker multiple points for disruption.

CAPEC-116: Excavation Base

CAPEC-154: Resource Location Spoofing Base

CAPEC-176: Configuration/Environment Manipulation Base

CAPEC-184: Software Integrity Attack Base

CAPEC-438: Modification During Manufacture Base

CAPEC-439: Manipulation During Distribution Base

CAPEC-440: Hardware Integrity Attack Base

CAPEC-690: Metadata Spoofing Base

CAPEC-403: Social Engineering Category

CAPEC-403: Attack patterns within this category focus on the manipulation and exploitation of people. The techniques defined by each pattern are used to convince a target into performing actions or divulging confidential information that benefit the adversary, often resulting in access to computer systems or facilities. While similar to a confidence trick or simple fraud, the term typically applies to trickery or deception for the purpose of information gathering, fraud, or computer system access. In most cases, the adversary never comes face-to-face with the victim.

CAPEC-137: Parameter Injection Base

CAPEC-151: Identity Spoofing Base

CAPEC-154: Resource Location Spoofing Base

CAPEC-173: Action Spoofing Base

CAPEC-184: Software Integrity Attack Base

CAPEC-410: Information Elicitation Base

CAPEC-416: Manipulate Human Behavior Base

CAPEC-607: Obstruction Base

CAPEC-690: Metadata Spoofing Base

CAPEC-514: Physical Security Category

CAPEC-514: Attack patterns within this category focus on physical security. The techniques defined by each pattern are used to exploit weaknesses in the physical security of a system in an attempt to achieve a desired negative technical impact.

CAPEC-116: Excavation Base

CAPEC-117: Interception Base

CAPEC-188: Reverse Engineering Base

CAPEC-390: Bypassing Physical Security Base

CAPEC-440: Hardware Integrity Attack Base

CAPEC-507: Physical Theft Base

CAPEC-607: Obstruction Base

CAPEC Informations

Notes

When this view is fully expanded, only the immediate children (meta patterns) of the top level categories will be visible. Lower level children (standard and detailed patterns) can be accessed by opening up the meta CAPEC entries. This is a known issue and will be corrected in a future release.

Submission

Name	Organization	Date	Date release
CAPEC Content Team	The MITRE Corporation	2014-06-23 +00:00

Modifications

Name	Organization	Date	Comment
CAPEC Content Team	The MITRE Corporation	2018-07-31 +00:00	Updated Other_Notes

The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.