CAPEC 攻击模式
CAPEC 基础字段和已提取关联查询。
| CAPEC ID | 名称 | 抽象级别 | 状态 | ATT&CK 映射数 | 操作 |
|---|---|---|---|---|---|
| CAPEC-45 | Buffer Overflow via Symbolic Links | Detailed | Draft | 0 | |
| CAPEC-452 | Infected Hardware | Standard | Stable | 0 | |
| CAPEC-456 | Infected Memory | Standard | Stable | 0 | |
| CAPEC-457 | USB Memory Attacks | Detailed | Draft | 2 | |
| CAPEC-458 | Flash Memory Attacks | Detailed | Draft | 0 | |
| CAPEC-459 | Creating a Rogue Certification Authority Certificate | Detailed | Draft | 0 | |
| CAPEC-46 | Overflow Variables and Tags | Detailed | Draft | 0 | |
| CAPEC-460 | HTTP Parameter Pollution (HPP) | Detailed | Draft | 0 | |
| CAPEC-461 | Web Services API Signature Forgery Leveraging Hash Function Extension Weakness | Standard | Draft | 0 | |
| CAPEC-462 | Cross-Domain Search Timing | Detailed | Draft | 0 | |
| CAPEC-463 | Padding Oracle Crypto Attack | Detailed | Draft | 0 | |
| CAPEC-464 | Evercookie | Standard | Draft | 1 | |
| CAPEC-465 | Transparent Proxy Abuse | Standard | Draft | 1 | |
| CAPEC-466 | Leveraging Active Adversary in the Middle Attacks to Bypass Same Origin Policy | Standard | Draft | 0 | |
| CAPEC-467 | Cross Site Identification | Detailed | Draft | 0 | |
| CAPEC-468 | Generic Cross-Browser Cross-Domain Theft | Standard | Draft | 0 | |
| CAPEC-469 | HTTP DoS | Standard | Draft | 1 | |
| CAPEC-47 | Buffer Overflow via Parameter Expansion | Detailed | Draft | 0 | |
| CAPEC-470 | Expanding Control over the Operating System from the Database | Detailed | Draft | 0 | |
| CAPEC-471 | Search Order Hijacking | Detailed | Stable | 3 |