CAPEC-191
Read Sensitive Constants Within an Executable
2014-06-23
00h00 +00:00
00h00 +00:00
指定 CAPEC 提醒
掌握特定 CAPEC 的任何變更。
CAPEC 資訊
前置條件
Access to a binary or executable such that it can be analyzed by various utilities.所需資源
Binary analysis programs such as 'strings' or 'grep', or hex editors.相關弱點
| 弱點名稱 | |
|---|---|
CWE-798 |
Use of Hard-coded Credentials The product contains hard-coded credentials, such as a password or cryptographic key. |
參考資料
REF-51
Wikipediahttp://en.wikipedia.org/wiki/Decompiler
REF-52
Wikipediahttp://en.wikipedia.org/wiki/Debugger
REF-53
Wikipediahttp://en.wikipedia.org/wiki/Disassembler
提交
| 名稱 | 機構 | 日期 | 發布日期 |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation |
修改記錄
| 名稱 | 機構 | 日期 | 備註 |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation | Updated Description Summary, Other_Notes, References, Related_Attack_Patterns, Resources_Required | |
| CAPEC Content Team | The MITRE Corporation | Updated Attack_Prerequisites, Description Summary, Resources_Required | |
| CAPEC Content Team | The MITRE Corporation | Updated Related_Weaknesses | |
| CAPEC Content Team | The MITRE Corporation | Updated @Name, Description, Related_Attack_Patterns, Taxonomy_Mappings | |
| CAPEC Content Team | The MITRE Corporation | Updated Description, Extended_Description |
