COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONMITRE canlı kaydı

CAPEC-154

Resource Location Spoofing

An adversary deceives an application or user and convinces them to request a resource from an unintended location. By spoofing the location, the adversary can cause an alternate resource to be used, often one that the adversary controls and can be used to help them achieve their malicious goals.

Soyutlama

Meta

Tipik ciddiyet

Medium

Saldırı ihtimali

Medium

Saldırıyı anla

Bu saldırı kalıbı nedir?

An adversary deceives an application or user and convinces them to request a resource from an unintended location. By spoofing the location, the adversary can cause an alternate resource to be used, often one that the adversary controls and can be used to help them achieve their malicious goals.

Gereksinimler

Saldırının gerçekleşmesi için ne gerekir?

Ön koşullar

  • None. All applications rely on file paths and therefore, in theory, they or their resources could be affected by this type of attack.

Gerekli beceri

MITRE kaydında belirtilmemiş.

Gerekli kaynak

  • None: No specialized resources are required to execute this type of attack.

Etki

Başarılı saldırı neye yol açar?

Execute Unauthorized Commands

Etkilenen alanlar: Authorization

Savunma

Nasıl önlenir ve etkisi azaltılır?

1
Monitor network activity to detect any anomalous or unauthorized communication exchanges.
CAPEC-154: Resource Location Spoofing — DayBreach Saldırı Sözlüğü · DayBreach