CAPEC 攻击模式
CAPEC 基础字段和已提取关联查询。
| CAPEC ID | 名称 | 抽象级别 | 状态 | ATT&CK 映射数 | 操作 |
|---|---|---|---|---|---|
| CAPEC-218 | Spoofing of UDDI/ebXML Messages | Detailed | Draft | 0 | |
| CAPEC-219 | XML Routing Detour Attacks | Standard | Draft | 0 | |
| CAPEC-22 | Exploiting Trust in Client | Meta | Draft | 0 | |
| CAPEC-220 | Client-Server Protocol Manipulation | Standard | Draft | 0 | |
| CAPEC-221 | Data Serialization External Entities Blowup | Detailed | Draft | 0 | |
| CAPEC-222 | iFrame Overlay | Detailed | Draft | 0 | |
| CAPEC-224 | Fingerprinting | Meta | Stable | 0 | |
| CAPEC-226 | Session Credential Falsification through Manipulation | Detailed | Draft | 0 | |
| CAPEC-227 | Sustained Client Engagement | Meta | Draft | 1 | |
| CAPEC-228 | DTD Injection | Detailed | Draft | 0 | |
| CAPEC-229 | Serialized Data Parameter Blowup | Detailed | Draft | 0 | |
| CAPEC-23 | File Content Injection | Standard | Draft | 0 | |
| CAPEC-230 | Serialized Data with Nested Payloads | Standard | Draft | 0 | |
| CAPEC-231 | Oversized Serialized Data Payloads | Standard | Draft | 0 | |
| CAPEC-233 | Privilege Escalation | Meta | Draft | 1 | |
| CAPEC-234 | Hijacking a privileged process | Standard | Draft | 0 | |
| CAPEC-237 | Escaping a Sandbox by Calling Code in Another Language | Detailed | Draft | 0 | |
| CAPEC-24 | Filter Failure through Buffer Overflow | Detailed | Draft | 0 | |
| CAPEC-240 | Resource Injection | Meta | Stable | 0 | |
| CAPEC-242 | Code Injection | Meta | Stable | 0 |