COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONLive MITRE record

CAPEC-154

Resource Location Spoofing

An adversary deceives an application or user and convinces them to request a resource from an unintended location. By spoofing the location, the adversary can cause an alternate resource to be used, often one that the adversary controls and can be used to help them achieve their malicious goals.

Abstraction

Meta

Typical severity

Medium

Likelihood of attack

Medium

Understand the attack

What is this attack pattern?

An adversary deceives an application or user and convinces them to request a resource from an unintended location. By spoofing the location, the adversary can cause an alternate resource to be used, often one that the adversary controls and can be used to help them achieve their malicious goals.

Requirements

What does the attack require?

Prerequisites

  • None. All applications rely on file paths and therefore, in theory, they or their resources could be affected by this type of attack.

Skills required

Not stated in the MITRE record.

Resources required

  • None: No specialized resources are required to execute this type of attack.

Impact

What does a successful attack lead to?

Execute Unauthorized Commands

Affected scopes: Authorization

Defence

How is it prevented and mitigated?

1
Monitor network activity to detect any anomalous or unauthorized communication exchanges.
CAPEC-154: Resource Location Spoofing — DayBreach Saldırı Sözlüğü · DayBreach