COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONMITRE canlı kaydı

CAPEC-324

TCP (ISN) Sequence Predictability Probe

This type of operating system probe attempts to determine an estimate for how predictable the sequence number generation algorithm is for a remote host. Statistical techniques, such as standard deviation, can be used to determine how predictable the sequence number generation is for a system. This result can then be compared to a database of operating system behaviors to determine a likely match for operating system and version.

Soyutlama

Detailed

Tipik ciddiyet

Low

Saldırı ihtimali

Medium

Saldırıyı anla

Bu saldırı kalıbı nedir?

This type of operating system probe attempts to determine an estimate for how predictable the sequence number generation algorithm is for a remote host. Statistical techniques, such as standard deviation, can be used to determine how predictable the sequence number generation is for a system. This result can then be compared to a database of operating system behaviors to determine a likely match for operating system and version.

Gereksinimler

Saldırının gerçekleşmesi için ne gerekir?

Ön koşullar

  • The ability to monitor and interact with network communications.Access to at least one host, and the privileges to interface with the network interface card.

Gerekli beceri

MITRE kaydında belirtilmemiş.

Gerekli kaynak

  • A tool capable of sending and receiving packets from a remote system.

Etki

Başarılı saldırı neye yol açar?

Read Data

Etkilenen alanlar: Confidentiality

Bypass Protection MechanismHide Activities

Etkilenen alanlar: Confidentiality, Access Control, Authorization

CAPEC-324: TCP (ISN) Sequence Predictability Probe — DayBreach Saldırı Sözlüğü · DayBreach