COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONLive MITRE record

CAPEC-167

White Box Reverse Engineering

An attacker discovers the structure, function, and composition of a type of computer software through white box analysis techniques. White box techniques involve methods which can be applied to a piece of software when an executable or some other compiled object can be directly subjected to analysis, revealing at least a portion of its machine instructions that can be observed upon execution.

Abstraction

Standard

Typical severity

Medium

Likelihood of attack

Medium

Understand the attack

What is this attack pattern?

An attacker discovers the structure, function, and composition of a type of computer software through white box analysis techniques. White box techniques involve methods which can be applied to a piece of software when an executable or some other compiled object can be directly subjected to analysis, revealing at least a portion of its machine instructions that can be observed upon execution.

Requirements

What does the attack require?

Prerequisites

  • Direct access to the object or software.

Skills required

Not stated in the MITRE record.

Resources required

  • Reverse engineering of software requires varying tools and methods that enable the decompiling of executable or other compiled objects.
CAPEC-167: White Box Reverse Engineering — DayBreach Saldırı Sözlüğü · DayBreach