Detalle de categoría CAPEC-513

CAPEC-513

Software
Draft
2014-06-23
00h00 +00:00
2022-09-29
00h00 +00:00
CAPEC Mitre.org
Alerta para un CAPEC
Manténgase informado sobre cualquier cambio en un CAPEC específico.
Gestionar notificaciones

Nombre: Software

Attack patterns within this category focus on the exploitation of software applications. The techniques defined by each pattern are used to exploit these weaknesses in the application's design or implementation in an attempt to achieve a desired negative technical impact.

Lista de miembros CAPEC

CAPEC-21: Exploitation of Trusted Identifiers Base

CAPEC-22: Exploiting Trust in Client Base

CAPEC-25: Forced Deadlock Base

CAPEC-26: Leveraging Race Conditions Base

CAPEC-28: Fuzzing Base

CAPEC-74: Manipulating State Base

CAPEC-94: Adversary in the Middle (AiTM) Base

CAPEC-112: Brute Force Base

CAPEC-113: Interface Manipulation Base

CAPEC-114: Authentication Abuse Base

CAPEC-115: Authentication Bypass Base

CAPEC-116: Excavation Base

CAPEC-117: Interception Base

CAPEC-122: Privilege Abuse Base

CAPEC-123: Buffer Manipulation Base

CAPEC-124: Shared Resource Manipulation Base

CAPEC-125: Flooding Base

CAPEC-129: Pointer Manipulation Base

CAPEC-130: Excessive Allocation Base

CAPEC-131: Resource Leak Exposure Base

CAPEC-137: Parameter Injection Base

CAPEC-148: Content Spoofing Base

CAPEC-151: Identity Spoofing Base

CAPEC-153: Input Data Manipulation Base

CAPEC-154: Resource Location Spoofing Base

CAPEC-161: Infrastructure Manipulation Base

CAPEC-165: File Manipulation Base

CAPEC-169: Footprinting Base

CAPEC-173: Action Spoofing Base

CAPEC-175: Code Inclusion Base

CAPEC-176: Configuration/Environment Manipulation Base

CAPEC-184: Software Integrity Attack Base

CAPEC-188: Reverse Engineering Base

CAPEC-212: Functionality Misuse Base

CAPEC-224: Fingerprinting Base

CAPEC-227: Sustained Client Engagement Base

CAPEC-233: Privilege Escalation Base

CAPEC-240: Resource Injection Base

CAPEC-242: Code Injection Base

CAPEC-248: Command Injection Base

CAPEC-272: Protocol Manipulation Base

CAPEC-410: Information Elicitation Base

CAPEC-438: Modification During Manufacture Base

CAPEC-441: Malicious Logic Insertion Base

CAPEC-548: Contaminate Resource Base

CAPEC-549: Local Execution of Code Base

CAPEC-554: Functionality Bypass Base

CAPEC-560: Use of Known Domain Credentials Base

CAPEC-586: Object Injection Base

CAPEC-594: Traffic Injection Base

CAPEC-607: Obstruction Base

CAPEC-690: Metadata Spoofing Base

Informaciones CAPEC

Envío

Nombre Organización Fecha Fecha de lanzamiento
CAPEC Content Team The MITRE Corporation 2014-06-23 +00:00

Modificaciones

Nombre Organización Fecha Comentario
CAPEC Content Team The MITRE Corporation 2015-11-09 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2017-01-09 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2018-07-31 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2019-04-04 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2019-09-30 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2020-07-30 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2022-09-29 +00:00 Updated Relationships
La información presentada en CVE Find proviene de varias fuentes de referencia cuidadosamente seleccionadas. Los datos CVE son proporcionados por MITRE Corporation y la Base de Datos Nacional de Vulnerabilidades (NVD). El catálogo de Vulnerabilidades Explotadas Conocidas (KEV) proviene de la Agencia de Seguridad de Infraestructura y Ciberseguridad (CISA), mientras que las puntuaciones EPSS provienen de FIRST.org. Además, los datos sobre debilidades de software (CWE) y patrones de ataque comunes (CAPEC) son mantenidos por MITRE Corporation, y la información sobre configuraciones de hardware y software (CPE) es proporcionada por la NVD.