Detail Kategori CAPEC-513

CAPEC-513

Software
2014-06-23
00h00 +00:00
Draft
2022-09-29
00h00 +00:00
CAPEC Mitre.org
Peringatan untuk CAPEC tertentu
Tetap terinformasi tentang perubahan untuk CAPEC tertentu.
Kelola notifikasi

Nama: Software

Attack patterns within this category focus on the exploitation of software applications. The techniques defined by each pattern are used to exploit these weaknesses in the application's design or implementation in an attempt to achieve a desired negative technical impact.

Daftar Anggota CAPEC

CAPEC-21: Exploitation of Trusted Identifiers Dasar

CAPEC-22: Exploiting Trust in Client Dasar

CAPEC-25: Forced Deadlock Dasar

CAPEC-26: Leveraging Race Conditions Dasar

CAPEC-28: Fuzzing Dasar

CAPEC-74: Manipulating State Dasar

CAPEC-94: Adversary in the Middle (AiTM) Dasar

CAPEC-112: Brute Force Dasar

CAPEC-113: Interface Manipulation Dasar

CAPEC-114: Authentication Abuse Dasar

CAPEC-115: Authentication Bypass Dasar

CAPEC-116: Excavation Dasar

CAPEC-117: Interception Dasar

CAPEC-122: Privilege Abuse Dasar

CAPEC-123: Buffer Manipulation Dasar

CAPEC-124: Shared Resource Manipulation Dasar

CAPEC-125: Flooding Dasar

CAPEC-129: Pointer Manipulation Dasar

CAPEC-130: Excessive Allocation Dasar

CAPEC-131: Resource Leak Exposure Dasar

CAPEC-137: Parameter Injection Dasar

CAPEC-148: Content Spoofing Dasar

CAPEC-151: Identity Spoofing Dasar

CAPEC-153: Input Data Manipulation Dasar

CAPEC-154: Resource Location Spoofing Dasar

CAPEC-161: Infrastructure Manipulation Dasar

CAPEC-165: File Manipulation Dasar

CAPEC-169: Footprinting Dasar

CAPEC-173: Action Spoofing Dasar

CAPEC-175: Code Inclusion Dasar

CAPEC-176: Configuration/Environment Manipulation Dasar

CAPEC-184: Software Integrity Attack Dasar

CAPEC-188: Reverse Engineering Dasar

CAPEC-212: Functionality Misuse Dasar

CAPEC-224: Fingerprinting Dasar

CAPEC-227: Sustained Client Engagement Dasar

CAPEC-233: Privilege Escalation Dasar

CAPEC-240: Resource Injection Dasar

CAPEC-242: Code Injection Dasar

CAPEC-248: Command Injection Dasar

CAPEC-272: Protocol Manipulation Dasar

CAPEC-410: Information Elicitation Dasar

CAPEC-438: Modification During Manufacture Dasar

CAPEC-441: Malicious Logic Insertion Dasar

CAPEC-548: Contaminate Resource Dasar

CAPEC-549: Local Execution of Code Dasar

CAPEC-554: Functionality Bypass Dasar

CAPEC-560: Use of Known Domain Credentials Dasar

CAPEC-586: Object Injection Dasar

CAPEC-594: Traffic Injection Dasar

CAPEC-607: Obstruction Dasar

CAPEC-690: Metadata Spoofing Dasar

Informasi CAPEC

Pengajuan

Nama Organisasi Tanggal Tanggal rilis
CAPEC Content Team The MITRE Corporation 2014-06-23 +00:00

Modifikasi

Nama Organisasi Tanggal Komentar
CAPEC Content Team The MITRE Corporation 2015-11-09 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2017-01-09 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2018-07-31 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2019-04-04 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2019-09-30 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2020-07-30 +00:00 Updated Relationships
CAPEC Content Team The MITRE Corporation 2022-09-29 +00:00 Updated Relationships
Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.