CAPEC 攻击模式
CAPEC 基础字段和已提取关联查询。
| CAPEC ID | 名称 | 抽象级别 | 状态 | ATT&CK 映射数 | 操作 |
|---|---|---|---|---|---|
| CAPEC-196 | Session Credential Falsification through Forging | Standard | Draft | 3 | |
| CAPEC-197 | Exponential Data Expansion | Detailed | Draft | 0 | |
| CAPEC-198 | XSS Targeting Error Pages | Detailed | Draft | 0 | |
| CAPEC-199 | XSS Using Alternate Syntax | Detailed | Draft | 0 | |
| CAPEC-2 | Inducing Account Lockout | Standard | Draft | 1 | |
| CAPEC-20 | Encryption Brute Forcing | Standard | Draft | 0 | |
| CAPEC-200 | Removal of filters: Input filters, output filters, data masking | Detailed | Draft | 0 | |
| CAPEC-201 | Serialized Data External Linking | Detailed | Draft | 0 | |
| CAPEC-202 | Create Malicious Client | Standard | Draft | 0 | |
| CAPEC-203 | Manipulate Registry Information | Standard | Stable | 2 | |
| CAPEC-204 | Lifting Sensitive Data Embedded in Cache | Detailed | Draft | 1 | |
| CAPEC-206 | Signing Malicious Code | Detailed | Draft | 1 | |
| CAPEC-207 | Removing Important Client Functionality | Standard | Draft | 0 | |
| CAPEC-208 | Removing/short-circuiting 'Purse' logic: removing/mutating 'cash' decrements | Detailed | Draft | 0 | |
| CAPEC-209 | XSS Using MIME Type Mismatch | Detailed | Draft | 0 | |
| CAPEC-21 | Exploitation of Trusted Identifiers | Meta | Stable | 3 | |
| CAPEC-212 | Functionality Misuse | Meta | Stable | 0 | |
| CAPEC-215 | Fuzzing for application mapping | Detailed | Draft | 0 | |
| CAPEC-216 | Communication Channel Manipulation | Meta | Stable | 0 | |
| CAPEC-217 | Exploiting Incorrectly Configured SSL/TLS | Standard | Draft | 0 |