COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONLive MITRE record

CAPEC-497

File Discovery

An adversary engages in probing and exploration activities to determine if common key files exists. Such files often contain configuration and security parameters of the targeted application, system or network. Using this knowledge may often pave the way for more damaging attacks.

Abstraction

Standard

Typical severity

Very Low

Likelihood of attack

High

Understand the attack

What is this attack pattern?

An adversary engages in probing and exploration activities to determine if common key files exists. Such files often contain configuration and security parameters of the targeted application, system or network. Using this knowledge may often pave the way for more damaging attacks.

Requirements

What does the attack require?

Prerequisites

  • The adversary must know the location of these common key files.

Skills required

Not stated in the MITRE record.

Resources required

Not stated in the MITRE record.

Impact

What does a successful attack lead to?

Read Data

Affected scopes: Confidentiality

Defence

How is it prevented and mitigated?

1
Leverage file protection mechanisms to render these files accessible only to authorized parties.
CAPEC-497: File Discovery — DayBreach Saldırı Sözlüğü · DayBreach