COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONMITRE canlı kaydı

CAPEC-327

TCP Options Probe

This OS fingerprinting probe analyzes the type and order of any TCP header options present within a response segment. Most operating systems use unique ordering and different option sets when options are present. RFC 793 does not specify a required order when options are present, so different implementations use unique ways of ordering or structuring TCP options. TCP options can be generated by ordinary TCP traffic.

Soyutlama

Detailed

Tipik ciddiyet

Low

Saldırı ihtimali

Medium

Saldırıyı anla

Bu saldırı kalıbı nedir?

This OS fingerprinting probe analyzes the type and order of any TCP header options present within a response segment. Most operating systems use unique ordering and different option sets when options are present. RFC 793 does not specify a required order when options are present, so different implementations use unique ways of ordering or structuring TCP options. TCP options can be generated by ordinary TCP traffic.

Gereksinimler

Saldırının gerçekleşmesi için ne gerekir?

Ön koşullar

  • The ability to monitor and interact with network communications.Access to at least one host, and the privileges to interface with the network interface card.

Gerekli beceri

MITRE kaydında belirtilmemiş.

Gerekli kaynak

  • A tool capable of sending and receiving packets from a remote system.

Etki

Başarılı saldırı neye yol açar?

Read Data

Etkilenen alanlar: Confidentiality

Bypass Protection MechanismHide Activities

Etkilenen alanlar: Confidentiality, Access Control, Authorization

CAPEC-327: TCP Options Probe — DayBreach Saldırı Sözlüğü · DayBreach