Adversary behaviour knowledge base
CAPEC Attack Patterns
Read how adversaries exploit security weaknesses, together with the prerequisites, the phases of the attack and the CWE classes they target.
Simple Header Extraction
An attacker extracts metadata and credentials from HTTP requests or application headers to identify sensitive session tokens or internal endpoints.
SQL Injection
An attacker injects malicious SQL statements into input fields to execute database commands, bypass authentication, or retrieve unauthorized records.
AJAX Injection
An attacker targets asynchronous JavaScript calls to manipulate request parameters or inject payloads into web API responses.
Path Traversal
An attacker uses directory traversal sequences (e.g. "../") to access files outside the designated web root or application directory.
Brute Force Authentication
An attacker systematically submits combinations of usernames and passwords until correct credentials are identified.
OS Command Injection
An attacker passes OS system shell commands through vulnerable application parameters to gain command execution on the host server.
Overflow Buffers
An attacker supplies input exceeding buffer allocation to overwrite adjacent memory addresses and gain code execution.
Server-Side Request Forgery Execution
An attacker manipulates application URL parameters to force the server into initiating outbound network requests to internal services.