CAPEC 攻击模式
CAPEC 基础字段和已提取关联查询。
| CAPEC ID | 名称 | 抽象级别 | 状态 | ATT&CK 映射数 | 操作 |
|---|---|---|---|---|---|
| CAPEC-8 | Buffer Overflow in an API Call | Detailed | Draft | 0 | |
| CAPEC-80 | Using UTF-8 Encoding to Bypass Validation Logic | Detailed | Draft | 0 | |
| CAPEC-81 | Web Server Logs Tampering | Detailed | Draft | 0 | |
| CAPEC-83 | XPath Injection | Detailed | Draft | 0 | |
| CAPEC-84 | XQuery Injection | Detailed | Draft | 0 | |
| CAPEC-85 | AJAX Footprinting | Detailed | Draft | 0 | |
| CAPEC-86 | XSS Through HTTP Headers | Detailed | Draft | 0 | |
| CAPEC-87 | Forceful Browsing | Standard | Draft | 0 | |
| CAPEC-88 | OS Command Injection | Standard | Draft | 0 | |
| CAPEC-89 | Pharming | Standard | Draft | 0 | |
| CAPEC-9 | Buffer Overflow in Local Command-Line Utilities | Detailed | Draft | 0 | |
| CAPEC-90 | Reflection Attack in Authentication Protocol | Standard | Draft | 0 | |
| CAPEC-92 | Forced Integer Overflow | Detailed | Draft | 0 | |
| CAPEC-93 | Log Injection-Tampering-Forging | Detailed | Draft | 0 | |
| CAPEC-94 | Adversary in the Middle (AiTM) | Meta | Stable | 1 | |
| CAPEC-95 | WSDL Scanning | Detailed | Draft | 0 | |
| CAPEC-96 | Block Access to Libraries | Detailed | Draft | 0 | |
| CAPEC-97 | Cryptanalysis | Standard | Draft | 0 | |
| CAPEC-98 | Phishing | Standard | Draft | 2 |
TOTAL 559 / PAGE 28 OF 28