COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONLive MITRE record

CAPEC-580

System Footprinting

An adversary engages in active probing and exploration activities to determine security information about a remote target system. Often times adversaries will rely on remote applications that can be probed for system configurations.

Abstraction

Standard

Typical severity

Low

Likelihood of attack

Low

Understand the attack

What is this attack pattern?

An adversary engages in active probing and exploration activities to determine security information about a remote target system. Often times adversaries will rely on remote applications that can be probed for system configurations.

Requirements

What does the attack require?

Prerequisites

  • The adversary must have logical access to the target network and system.

Skills required

  • Low: The adversary needs to know basic linux commands.

Resources required

Not stated in the MITRE record.

Impact

What does a successful attack lead to?

Read Data

Affected scopes: Confidentiality

Defence

How is it prevented and mitigated?

1
Keep patches up to date by installing weekly or daily if possible.
2
Identify programs that may be used to acquire peripheral information and block them by using a software restriction policy or tools that restrict program execution by using a process allowlist.
CAPEC-580: System Footprinting — DayBreach Saldırı Sözlüğü · DayBreach