COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONLive MITRE record

CAPEC-181

Flash File Overlay

An attacker creates a transparent overlay using flash in order to intercept user actions for the purpose of performing a clickjacking attack. In this technique, the Flash file provides a transparent overlay over HTML content. Because the Flash application is on top of the content, user actions, such as clicks, are caught by the Flash application rather than the underlying HTML. The action is then interpreted by the overlay to perform the actions the attacker wishes.

Abstraction

Detailed

Typical severity

Medium

Likelihood of attack

Medium

Understand the attack

What is this attack pattern?

An attacker creates a transparent overlay using flash in order to intercept user actions for the purpose of performing a clickjacking attack. In this technique, the Flash file provides a transparent overlay over HTML content. Because the Flash application is on top of the content, user actions, such as clicks, are caught by the Flash application rather than the underlying HTML. The action is then interpreted by the overlay to perform the actions the attacker wishes.

Requirements

What does the attack require?

Prerequisites

  • The victim must be tricked into navigating to the attackers' decoy site and performing the actions on the decoy page.
  • The victim's browser must support invisible Flash overlays.

Skills required

Not stated in the MITRE record.

Resources required

  • The attacker must be able to force the Flash overlay over the decoy content.
CAPEC-181: Flash File Overlay — DayBreach Saldırı Sözlüğü · DayBreach