CAPEC-191
Read Sensitive Constants Within an Executable
2014-06-23
00h00 +00:00
00h00 +00:00
指定 CAPEC 提醒
随时了解指定 CAPEC 的变更。
CAPEC 信息
前提条件
Access to a binary or executable such that it can be analyzed by various utilities.所需资源
Binary analysis programs such as 'strings' or 'grep', or hex editors.相关弱点
| 弱点名称 | |
|---|---|
CWE-798 |
Use of Hard-coded Credentials The product contains hard-coded credentials, such as a password or cryptographic key. |
参考资料
REF-51
Wikipediahttp://en.wikipedia.org/wiki/Decompiler
REF-52
Wikipediahttp://en.wikipedia.org/wiki/Debugger
REF-53
Wikipediahttp://en.wikipedia.org/wiki/Disassembler
提交记录
| 名称 | 组织 | 日期 | 发布日期 |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation |
修改记录
| 名称 | 组织 | 日期 | 备注 |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation | Updated Description Summary, Other_Notes, References, Related_Attack_Patterns, Resources_Required | |
| CAPEC Content Team | The MITRE Corporation | Updated Attack_Prerequisites, Description Summary, Resources_Required | |
| CAPEC Content Team | The MITRE Corporation | Updated Related_Weaknesses | |
| CAPEC Content Team | The MITRE Corporation | Updated @Name, Description, Related_Attack_Patterns, Taxonomy_Mappings | |
| CAPEC Content Team | The MITRE Corporation | Updated Description, Extended_Description |
