CAPEC 攻击模式
CAPEC 基础字段和已提取关联查询。
| CAPEC ID | 名称 | 抽象级别 | 状态 | ATT&CK 映射数 | 操作 |
|---|---|---|---|---|---|
| CAPEC-1 | Accessing Functionality Not Properly Constrained by ACLs | Standard | Draft | 1 | |
| CAPEC-10 | Buffer Overflow via Environment Variables | Detailed | Draft | 0 | |
| CAPEC-100 | Overflow Buffers | Standard | Draft | 0 | |
| CAPEC-101 | Server Side Include (SSI) Injection | Detailed | Draft | 0 | |
| CAPEC-102 | Session Sidejacking | Detailed | Draft | 0 | |
| CAPEC-103 | Clickjacking | Standard | Draft | 0 | |
| CAPEC-104 | Cross Zone Scripting | Standard | Draft | 0 | |
| CAPEC-105 | HTTP Request Splitting | Detailed | Stable | 0 | |
| CAPEC-107 | Cross Site Tracing | Detailed | Draft | 0 | |
| CAPEC-108 | Command Line Execution through SQL Injection | Detailed | Draft | 0 | |
| CAPEC-109 | Object Relational Mapping Injection | Detailed | Draft | 0 | |
| CAPEC-11 | Cause Web Server Misclassification | Detailed | Draft | 1 | |
| CAPEC-110 | SQL Injection through SOAP Parameter Tampering | Detailed | Draft | 0 | |
| CAPEC-111 | JSON Hijacking (aka JavaScript Hijacking) | Standard | Draft | 0 | |
| CAPEC-112 | Brute Force | Meta | Draft | 1 | |
| CAPEC-113 | Interface Manipulation | Meta | Draft | 0 | |
| CAPEC-114 | Authentication Abuse | Meta | Draft | 1 | |
| CAPEC-115 | Authentication Bypass | Meta | Draft | 1 | |
| CAPEC-116 | Excavation | Meta | Stable | 0 | |
| CAPEC-117 | Interception | Meta | Stable | 0 |
TOTAL 559 / PAGE 1 OF 28