CAPEC 攻击模式
CAPEC 基础字段和已提取关联查询。
| CAPEC ID | 名称 | 抽象级别 | 状态 | ATT&CK 映射数 | 操作 |
|---|---|---|---|---|---|
| CAPEC-138 | Reflection Injection | Standard | Draft | 0 | |
| CAPEC-139 | Relative Path Traversal | Detailed | Draft | 0 | |
| CAPEC-14 | Client-side Injection-induced Buffer Overflow | Detailed | Draft | 0 | |
| CAPEC-140 | Bypassing of Intermediate Forms in Multiple-Form Sets | Standard | Draft | 0 | |
| CAPEC-141 | Cache Poisoning | Standard | Draft | 1 | |
| CAPEC-142 | DNS Cache Poisoning | Detailed | Draft | 1 | |
| CAPEC-143 | Detect Unpublicized Web Pages | Detailed | Draft | 0 | |
| CAPEC-144 | Detect Unpublicized Web Services | Detailed | Draft | 0 | |
| CAPEC-145 | Checksum Spoofing | Detailed | Draft | 0 | |
| CAPEC-146 | XML Schema Poisoning | Detailed | Stable | 0 | |
| CAPEC-147 | XML Ping of the Death | Detailed | Draft | 0 | |
| CAPEC-148 | Content Spoofing | Meta | Stable | 1 | |
| CAPEC-149 | Explore for Predictable Temporary File Names | Detailed | Draft | 0 | |
| CAPEC-15 | Command Delimiters | Standard | Draft | 0 | |
| CAPEC-150 | Collect Data from Common Resource Locations | Standard | Draft | 6 | |
| CAPEC-151 | Identity Spoofing | Meta | Stable | 0 | |
| CAPEC-153 | Input Data Manipulation | Meta | Draft | 0 | |
| CAPEC-154 | Resource Location Spoofing | Meta | Stable | 0 | |
| CAPEC-155 | Screen Temporary Files for Sensitive Information | Detailed | Draft | 0 | |
| CAPEC-157 | Sniffing Attacks | Standard | Draft | 0 |