Attack patterns (CAPEC)

MITRE's catalog of how attacks on software are carried out, from broad approaches down to specific techniques. Each pattern's page shows how the attack unfolds, what it needs, how to stop it, and the recent CVEs with the weaknesses it exploits.

558 attack patterns; open a branch to see the more specific ones under it.

CAPEC-21 Exploitation of Trusted Identifiers High 11
- CAPEC-62 Cross Site Request Forgery Very High 1
  - CAPEC-467 Cross Site Identification Low
- CAPEC-196 Session Credential Falsification through Forging Medium 2
  - CAPEC-59 Session Credential Falsification through Prediction High
  - CAPEC-226 Session Credential Falsification through Manipulation Medium
- CAPEC-510 SaaS User Request Forgery Medium
- CAPEC-593 Session Hijacking Very High 4
  - CAPEC-60 Reusing Session IDs (aka Session Replay) High
  - CAPEC-61 Session Fixation High
  - CAPEC-102 Session Sidejacking High
  - CAPEC-107 Cross Site Tracing Very High
CAPEC-22 Exploiting Trust in Client High 9
- CAPEC-39 Manipulating Opaque Client-based Data Tokens Medium 1
  - CAPEC-31 Accessing/Intercepting/Modifying HTTP Cookies High
- CAPEC-77 Manipulating User-Controlled Variables Very High 2
  - CAPEC-13 Subverting Environment Variable Values Very High
  - CAPEC-162 Manipulating Hidden Fields High
- CAPEC-202 Create Malicious Client Medium
- CAPEC-207 Removing Important Client Functionality High 2
  - CAPEC-200 Removal of filters: Input filters, output filters, data masking Medium
  - CAPEC-208 Removing/short-circuiting 'Purse' logic: removing/mutating 'cash' decrements Medium
CAPEC-25 Forced Deadlock High
CAPEC-26 Leveraging Race Conditions High 2
- CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions High 1
  - CAPEC-27 Leveraging Race Conditions via Symbolic Links High
CAPEC-28 Fuzzing Medium
CAPEC-74 Manipulating State High 3
- CAPEC-140 Bypassing of Intermediate Forms in Multiple-Form Sets Medium
- CAPEC-663 Exploitation of Transient Instruction Execution Very High 1
  - CAPEC-696 Load Value Injection Very High
CAPEC-94 Adversary in the Middle (AiTM) Very High 10
- CAPEC-219 XML Routing Detour Attacks Medium
- CAPEC-384 Application API Message Manipulation via Man-in-the-Middle Low 2
  - CAPEC-385 Transaction or Event Tampering via Application API Manipulation Medium
  - CAPEC-389 Content Spoofing Via Application API Manipulation Low
- CAPEC-386 Application API Navigation Remapping Medium 2
  - CAPEC-387 Navigation Remapping To Propagate Malicious Content Medium
  - CAPEC-388 Application API Button Hijacking Medium
- CAPEC-466 Leveraging Active Adversary in the Middle Attacks to Bypass Same Origin Policy Medium
- CAPEC-662 Adversary in the Browser (AiTB) Very High
- CAPEC-701 Browser in the Middle (BiTM) High
CAPEC-112 Brute Force High 6
- CAPEC-20 Encryption Brute Forcing Low
- CAPEC-49 Password Brute Forcing High 4
  - CAPEC-16 Dictionary-based Password Attack High
  - CAPEC-55 Rainbow Table Password Cracking Medium
  - CAPEC-70 Try Common or Default Usernames and Passwords High
  - CAPEC-565 Password Spraying High
CAPEC-113 Interface Manipulation Medium 5
- CAPEC-36 Using Unpublished Interfaces or Functionality High
- CAPEC-121 Exploit Non-Production Interfaces High 1
  - CAPEC-661 Root/Jailbreak Detection Evasion via Debugging Very High
- CAPEC-133 Try All Common Switches Medium
- CAPEC-160 Exploit Script-Based APIs Medium
CAPEC-114 Authentication Abuse Medium
CAPEC-115 Authentication Bypass Medium 6
- CAPEC-87 Forceful Browsing High
- CAPEC-461 Web Services API Signature Forgery Leveraging Hash Function Extension Weakness High
- CAPEC-480 Escaping Virtualization Very High 1
  - CAPEC-237 Escaping a Sandbox by Calling Code in Another Language Very High
- CAPEC-664 Server Side Request Forgery High
- CAPEC-668 Key Negotiation of Bluetooth Attack (KNOB) High
CAPEC-116 Excavation Medium 21
- CAPEC-54 Query System for Information Low 5
  - CAPEC-95 WSDL Scanning High
  - CAPEC-127 Directory Indexing Medium
  - CAPEC-215 Fuzzing for application mapping Low
  - CAPEC-261 Fuzzing for garnering other adjacent user/sensitive data Medium
  - CAPEC-462 Cross-Domain Search Timing Medium
- CAPEC-150 Collect Data from Common Resource Locations Medium 7
  - CAPEC-143 Detect Unpublicized Web Pages Low
  - CAPEC-144 Detect Unpublicized Web Services Low
  - CAPEC-155 Screen Temporary Files for Sensitive Information Medium
  - CAPEC-406 Dumpster Diving Low
  - CAPEC-637 Collect Data from Clipboard Low
  - CAPEC-647 Collect Data from Registries Medium
  - CAPEC-648 Collect Data from Screen Capture Medium
- CAPEC-545 Pull Data from System Resources 3
  - CAPEC-498 Probe iOS Screenshots
  - CAPEC-546 Incomplete Data Deletion in a Multi-Tenant Environment Medium
  - CAPEC-639 Probe System Files Medium
- CAPEC-569 Collect Data as Provided by Users 1
  - CAPEC-568 Capture Credentials via Keylogger High
- CAPEC-675 Retrieve Data from Decommissioned Devices Medium
CAPEC-117 Interception Medium 11
- CAPEC-157 Sniffing Attacks Medium 4
  - CAPEC-57 Utilizing REST's Trust in the System Resource to Obtain Sensitive Data Very High
  - CAPEC-65 Sniff Application Code High
  - CAPEC-158 Sniffing Network Traffic Medium
  - CAPEC-609 Cellular Traffic Intercept Low
- CAPEC-499 Android Intent Intercept 1
  - CAPEC-501 Android Activity Hijack Medium
- CAPEC-651 Eavesdropping Medium 3
  - CAPEC-508 Shoulder Surfing High
  - CAPEC-634 Probe Audio and Video Peripherals High
  - CAPEC-699 Eavesdropping on a Monitor High
CAPEC-122 Privilege Abuse Medium 16
- CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs High 4
  - CAPEC-58 Restful Privilege Elevation High
  - CAPEC-679 Exploitation of Improperly Configured or Implemented Memory Protections Very High
  - CAPEC-680 Exploitation of Improperly Controlled Registers High
  - CAPEC-681 Exploitation of Improperly Controlled Hardware Security Identifiers Very High
- CAPEC-17 Using Malicious Files Very High 6
  - CAPEC-177 Create files with the same name as files protected with a higher classification Very High
  - CAPEC-263 Force Use of Corrupted Files Medium
  - CAPEC-562 Modify Shared File
  - CAPEC-563 Add Malicious File to Shared Webroot
  - CAPEC-642 Replace Binaries High
  - CAPEC-650 Upload a Web Shell to a Web Server High
- CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels Medium 1
  - CAPEC-702 Exploiting Incorrect Chaining or Granularity of Hardware Debug Components Medium
- CAPEC-201 Serialized Data External Linking High
- CAPEC-503 WebView Exposure
CAPEC-123 Buffer Manipulation Very High 14
- CAPEC-100 Overflow Buffers Very High 12
  - CAPEC-8 Buffer Overflow in an API Call High
  - CAPEC-9 Buffer Overflow in Local Command-Line Utilities High
  - CAPEC-10 Buffer Overflow via Environment Variables High
  - CAPEC-14 Client-side Injection-induced Buffer Overflow High
  - CAPEC-24 Filter Failure through Buffer Overflow High
  - CAPEC-42 MIME Conversion High
  - CAPEC-44 Overflow Binary Resource File Very High
  - CAPEC-45 Buffer Overflow via Symbolic Links High
  - CAPEC-46 Overflow Variables and Tags High
  - CAPEC-47 Buffer Overflow via Parameter Expansion High
  - CAPEC-67 String Format Overflow in syslog() Very High
  - CAPEC-256 SOAP Array Overflow High
- CAPEC-540 Overread Buffers High
CAPEC-124 Shared Resource Manipulation Medium
CAPEC-125 Flooding Medium 9
- CAPEC-482 TCP Flood
- CAPEC-486 UDP Flood
- CAPEC-487 ICMP Flood
- CAPEC-488 HTTP Flood
- CAPEC-489 SSL Flood
- CAPEC-490 Amplification
- CAPEC-528 XML Flood Medium 1
  - CAPEC-147 XML Ping of the Death Medium
- CAPEC-666 BlueSmacking Medium
CAPEC-129 Pointer Manipulation Medium
CAPEC-130 Excessive Allocation Medium 11
- CAPEC-230 Serialized Data with Nested Payloads High 2
  - CAPEC-197 Exponential Data Expansion Medium
  - CAPEC-491 Quadratic Data Expansion
- CAPEC-231 Oversized Serialized Data Payloads High 2
  - CAPEC-221 Data Serialization External Entities Blowup
  - CAPEC-229 Serialized Data Parameter Blowup High
- CAPEC-492 Regular Expression Exponential Blowup
- CAPEC-493 SOAP Array Blowup
- CAPEC-494 TCP Fragmentation
- CAPEC-495 UDP Fragmentation
- CAPEC-496 ICMP Fragmentation
CAPEC-131 Resource Leak Exposure Medium
CAPEC-137 Parameter Injection Medium 9
- CAPEC-6 Argument Injection High
- CAPEC-15 Command Delimiters High 1
  - CAPEC-460 HTTP Parameter Pollution (HPP) Medium
- CAPEC-134 Email Injection Medium
- CAPEC-135 Format String Injection High
- CAPEC-138 Reflection Injection Very High
- CAPEC-182 Flash Injection Medium 2
  - CAPEC-174 Flash Parameter Injection Medium
  - CAPEC-178 Cross-Site Flashing Medium
CAPEC-148 Content Spoofing Medium 5
- CAPEC-145 Checksum Spoofing Medium
- CAPEC-218 Spoofing of UDDI/ebXML Messages Medium
- CAPEC-502 Intent Spoof
- CAPEC-627 Counterfeit GPS Signals High 1
  - CAPEC-628 Carry-Off GPS Attack High
CAPEC-151 Identity Spoofing Medium 22
- CAPEC-89 Pharming Very High
- CAPEC-98 Phishing Very High 3
  - CAPEC-163 Spear Phishing High
  - CAPEC-164 Mobile Phishing High
  - CAPEC-656 Voice Phishing High
- CAPEC-194 Fake the Source of Data Medium 6
  - CAPEC-275 DNS Rebinding Very High
  - CAPEC-543 Counterfeit Websites High
  - CAPEC-544 Counterfeit Organizations High
  - CAPEC-598 DNS Spoofing
  - CAPEC-633 Token Impersonation Medium
  - CAPEC-697 DHCP Spoofing High
- CAPEC-195 Principal Spoof Medium 1
  - CAPEC-599 Terrestrial Jamming High
- CAPEC-473 Signature Spoof 7
  - CAPEC-459 Creating a Rogue Certification Authority Certificate Very High
  - CAPEC-474 Signature Spoofing by Key Theft High
  - CAPEC-475 Signature Spoofing by Improper Validation High
  - CAPEC-476 Signature Spoofing by Misrepresentation High
  - CAPEC-477 Signature Spoofing by Mixing Signed and Unsigned Content High
  - CAPEC-479 Malicious Root Certificate Low
  - CAPEC-485 Signature Spoofing by Key Recreation High
CAPEC-153 Input Data Manipulation Medium 19
- CAPEC-126 Path Traversal Very High 3
  - CAPEC-76 Manipulating Web Input to File System Calls Very High
  - CAPEC-139 Relative Path Traversal High
  - CAPEC-597 Absolute Path Traversal
- CAPEC-128 Integer Attacks Medium 1
  - CAPEC-92 Forced Integer Overflow High
- CAPEC-267 Leverage Alternate Encoding High 12
  - CAPEC-3 Using Leading 'Ghost' Character Sequences to Bypass Input Filters Medium
  - CAPEC-4 Using Alternative IP Address Encodings High
  - CAPEC-43 Exploiting Multiple Input Interpretation Layers High
  - CAPEC-52 Embedding NULL Bytes High
  - CAPEC-53 Postfix, Null Terminate, and Backslash High
  - CAPEC-64 Using Slashes and URL Encoding Combined to Bypass Validation Logic High
  - CAPEC-71 Using Unicode Encoding to Bypass Validation Logic High
  - CAPEC-72 URL Encoding High
  - CAPEC-78 Using Escaped Slashes in Alternate Encoding High
  - CAPEC-79 Using Slashes in Alternate Encoding High
  - CAPEC-80 Using UTF-8 Encoding to Bypass Validation Logic High
  - CAPEC-120 Double Encoding Medium
CAPEC-154 Resource Location Spoofing Medium 15
- CAPEC-159 Redirect Access to Libraries Very High 4
  - CAPEC-38 Leveraging/Manipulating Configuration File Search Paths Very High
  - CAPEC-132 Symlink Attack High
  - CAPEC-471 Search Order Hijacking Medium
  - CAPEC-641 DLL Side-Loading High
- CAPEC-616 Establish Rogue Location Medium 9
  - CAPEC-505 Scheme Squatting
  - CAPEC-611 BitSquatting Medium
  - CAPEC-615 Evil Twin Wi-Fi Attack Low
  - CAPEC-617 Cellular Rogue Base Station Low
  - CAPEC-630 TypoSquatting Medium
  - CAPEC-631 SoundSquatting Medium
  - CAPEC-632 Homograph Attack via Homoglyphs Medium
  - CAPEC-667 Bluetooth Impersonation AttackS (BIAS) High
  - CAPEC-695 Repo Jacking High
CAPEC-161 Infrastructure Manipulation High 9
- CAPEC-141 Cache Poisoning High 1
  - CAPEC-142 DNS Cache Poisoning High
- CAPEC-166 Force the System to Reset Values Medium
- CAPEC-268 Audit Log Manipulation 2
  - CAPEC-81 Web Server Logs Tampering High
  - CAPEC-93 Log Injection-Tampering-Forging High
- CAPEC-481 Contradictory Destinations in Traffic Routing Schemes High
- CAPEC-571 Block Logging to Central Repository Low
- CAPEC-700 Network Boundary Bridging High
CAPEC-165 File Manipulation Medium 9
- CAPEC-73 User-Controlled Filename High
- CAPEC-572 Artificially Inflate File Sizes Medium 1
  - CAPEC-655 Avoid Security Tool Identification by Adding Data High
- CAPEC-635 Alternative Execution Due to Deceptive Filenames High 2
  - CAPEC-11 Cause Web Server Misclassification High
  - CAPEC-649 Adding a Space to a File Extension Medium
- CAPEC-636 Hiding Malicious Data or Code within Files High 2
  - CAPEC-35 Leverage Executable Code in Non-Executable Files Very High
  - CAPEC-168 Windows ::DATA Alternate Data Stream Medium
CAPEC-169 Footprinting Very Low 40
- CAPEC-292 Host Discovery Low 11
  - CAPEC-285 ICMP Echo Request Ping Low
  - CAPEC-294 ICMP Address Mask Request Low
  - CAPEC-295 Timestamp Request Low
  - CAPEC-296 ICMP Information Request Low
  - CAPEC-297 TCP ACK Ping Low
  - CAPEC-298 UDP Ping Low
  - CAPEC-299 TCP SYN Ping Low
  - CAPEC-612 WiFi MAC Address Tracking Low
  - CAPEC-613 WiFi SSID Tracking Low
  - CAPEC-618 Cellular Broadcast Message Request Low
  - CAPEC-619 Signal Strength Tracking Low
- CAPEC-300 Port Scanning Low 9
  - CAPEC-287 TCP SYN Scan Low
  - CAPEC-301 TCP Connect Scan Low
  - CAPEC-302 TCP FIN Scan Low
  - CAPEC-303 TCP Xmas Scan Low
  - CAPEC-304 TCP Null Scan Low
  - CAPEC-305 TCP ACK Scan Low
  - CAPEC-306 TCP Window Scan Low
  - CAPEC-307 TCP RPC Scan Low
  - CAPEC-308 UDP Scan Low
- CAPEC-309 Network Topology Mapping Low 4
  - CAPEC-290 Enumerate Mail Exchange (MX) Records Low
  - CAPEC-291 DNS Zone Transfers Low
  - CAPEC-293 Traceroute Route Enumeration Low
  - CAPEC-643 Identify Shared Files/Directories on System Medium
- CAPEC-497 File Discovery Very Low 1
  - CAPEC-149 Explore for Predictable Temporary File Names Medium
- CAPEC-529 Malware-Directed Internal Reconnaissance Medium
- CAPEC-573 Process Footprinting Low
- CAPEC-574 Services Footprinting Low
- CAPEC-575 Account Footprinting Low
- CAPEC-576 Group Permission Footprinting Low
- CAPEC-577 Owner Footprinting Low
- CAPEC-580 System Footprinting Low 2
  - CAPEC-85 AJAX Footprinting Low
  - CAPEC-581 Security Software Footprinting
- CAPEC-646 Peripheral Footprinting Medium
- CAPEC-694 System Location Discovery Very Low
CAPEC-173 Action Spoofing Very High 7
- CAPEC-103 Clickjacking High 3
  - CAPEC-181 Flash File Overlay Medium
  - CAPEC-222 iFrame Overlay High
  - CAPEC-587 Cross Frame Scripting (XFS) High
- CAPEC-504 Task Impersonation High 1
  - CAPEC-654 Credential Prompt Impersonation High
- CAPEC-506 Tapjacking Low
CAPEC-175 Code Inclusion Very High 8
- CAPEC-251 Local Code Inclusion Medium 3
  - CAPEC-252 PHP Local File Inclusion Medium
  - CAPEC-640 Inclusion of Code in Existing Process High
  - CAPEC-660 Root/Jailbreak Detection Evasion via Hooking Very High
- CAPEC-253 Remote Code Inclusion 3
  - CAPEC-101 Server Side Include (SSI) Injection High
  - CAPEC-193 PHP Remote File Inclusion High
  - CAPEC-500 WebView Injection
CAPEC-176 Configuration/Environment Manipulation Medium 9
- CAPEC-75 Manipulating Writeable Configuration Files Very High
- CAPEC-203 Manipulate Registry Information Medium 3
  - CAPEC-51 Poison Web Service Registry Very High
  - CAPEC-270 Modification of Registry Run Keys Medium
  - CAPEC-478 Modification of Windows Service Configuration High
- CAPEC-271 Schema Poisoning High 1
  - CAPEC-146 XML Schema Poisoning High
- CAPEC-536 Data Injected During Configuration High
- CAPEC-578 Disable Security Software Medium
CAPEC-184 Software Integrity Attack Low 7
- CAPEC-185 Malicious Software Download Very High
- CAPEC-186 Malicious Software Update High 4
  - CAPEC-187 Malicious Automated Software Update via Redirection High
  - CAPEC-533 Malicious Manual Software Update High
  - CAPEC-614 Rooting SIM Cards High
  - CAPEC-657 Malicious Automated Software Update via Spoofing High
- CAPEC-669 Alteration of a Software Update High
CAPEC-188 Reverse Engineering Low 9
- CAPEC-167 White Box Reverse Engineering Medium 4
  - CAPEC-37 Retrieve Embedded Sensitive Data Very High
  - CAPEC-190 Reverse Engineer an Executable to Expose Assumed Hidden Functionality Low
  - CAPEC-191 Read Sensitive Constants Within an Executable Low
  - CAPEC-204 Lifting Sensitive Data Embedded in Cache Medium
- CAPEC-189 Black Box Reverse Engineering Low 3
  - CAPEC-621 Analysis of Packet Timing and Sizes Low
  - CAPEC-622 Electromagnetic Side-Channel Attack Low
  - CAPEC-623 Compromising Emanations Attack Low
CAPEC-192 Protocol Analysis Low 3
- CAPEC-97 Cryptanalysis Very High 2
  - CAPEC-463 Padding Oracle Crypto Attack High
  - CAPEC-608 Cryptanalysis of Cellular Encryption High
CAPEC-212 Functionality Misuse Medium 7
- CAPEC-2 Inducing Account Lockout Medium
- CAPEC-48 Passing Local Filenames to Functions That Expect a URL High
- CAPEC-50 Password Recovery Exploitation High
- CAPEC-111 JSON Hijacking (aka JavaScript Hijacking) High
- CAPEC-620 Drop Encryption Level High 1
  - CAPEC-606 Weakening of Cellular Encryption High
- CAPEC-682 Exploitation of Firmware or ROM Code with Unpatchable Vulnerabilities High
CAPEC-216 Communication Channel Manipulation 2
- CAPEC-12 Choosing Message Identifier High
- CAPEC-217 Exploiting Incorrectly Configured SSL/TLS
CAPEC-224 Fingerprinting Very Low 22
- CAPEC-312 Active OS Fingerprinting Low 16
  - CAPEC-317 IP ID Sequencing Probe Low
  - CAPEC-318 IP 'ID' Echoed Byte-Order Probe Low
  - CAPEC-319 IP (DF) 'Don't Fragment Bit' Echoing Probe Low
  - CAPEC-320 TCP Timestamp Probe Low
  - CAPEC-321 TCP Sequence Number Probe Low
  - CAPEC-322 TCP (ISN) Greatest Common Divisor Probe Low
  - CAPEC-323 TCP (ISN) Counter Rate Probe Low
  - CAPEC-324 TCP (ISN) Sequence Predictability Probe Low
  - CAPEC-325 TCP Congestion Control Flag (ECN) Probe Low
  - CAPEC-326 TCP Initial Window Size Probe Low
  - CAPEC-327 TCP Options Probe Low
  - CAPEC-328 TCP 'RST' Flag Checksum Probe Low
  - CAPEC-329 ICMP Error Message Quoting Probe Low
  - CAPEC-330 ICMP Error Message Echoing Integrity Probe Low
  - CAPEC-331 ICMP IP Total Length Field Probe Low
  - CAPEC-332 ICMP IP 'ID' Field Error Message Probe Low
- CAPEC-313 Passive OS Fingerprinting Low
- CAPEC-541 Application Fingerprinting Low 3
  - CAPEC-170 Web Application Fingerprinting Low
  - CAPEC-310 Scanning for Vulnerable Software Low
  - CAPEC-472 Browser Fingerprinting Low
CAPEC-227 Sustained Client Engagement 1
- CAPEC-469 HTTP DoS Low
CAPEC-233 Privilege Escalation 5
- CAPEC-30 Hijacking a Privileged Thread of Execution Very High
- CAPEC-68 Subvert Code-signing Facilities Very High
- CAPEC-69 Target Programs with Elevated Privileges Very High
- CAPEC-104 Cross Zone Scripting High
- CAPEC-234 Hijacking a privileged process Medium
CAPEC-240 Resource Injection High 1
- CAPEC-610 Cellular Data Injection High
CAPEC-242 Code Injection High 18
- CAPEC-19 Embedding Scripts within Scripts High
- CAPEC-23 File Content Injection Very High
- CAPEC-41 Using Meta-characters in E-mail Headers to Inject Malicious Payloads High
- CAPEC-63 Cross-Site Scripting (XSS) Very High 13
  - CAPEC-588 DOM-Based XSS Very High
  - CAPEC-591 Reflected XSS Very High 9
    CAPEC-18 XSS Targeting Non-Script Elements Very High
    CAPEC-32 XSS Through HTTP Query Strings High
    CAPEC-86 XSS Through HTTP Headers Very High
    CAPEC-198 XSS Targeting Error Pages Medium
    CAPEC-199 XSS Using Alternate Syntax High
    CAPEC-243 XSS Targeting HTML Attributes Medium
    CAPEC-244 XSS Targeting URI Placeholders High
    CAPEC-245 XSS Using Doubled Characters Medium
    CAPEC-247 XSS Using Invalid Characters Medium
  - CAPEC-592 Stored XSS Very High 1
    CAPEC-209 XSS Using MIME Type Mismatch Medium
- CAPEC-468 Generic Cross-Browser Cross-Domain Theft Medium
CAPEC-248 Command Injection High 15
- CAPEC-40 Manipulating Writeable Terminal Devices Very High
- CAPEC-66 SQL Injection High 5
  - CAPEC-7 Blind SQL Injection High
  - CAPEC-108 Command Line Execution through SQL Injection Very High
  - CAPEC-109 Object Relational Mapping Injection High
  - CAPEC-110 SQL Injection through SOAP Parameter Tampering Very High
  - CAPEC-470 Expanding Control over the Operating System from the Database Very High
- CAPEC-88 OS Command Injection High
- CAPEC-136 LDAP Injection High
- CAPEC-183 IMAP/SMTP Command Injection Medium
- CAPEC-250 XML Injection 3
  - CAPEC-83 XPath Injection High
  - CAPEC-84 XQuery Injection Very High
  - CAPEC-228 DTD Injection Medium
- CAPEC-676 NoSQL Injection High
CAPEC-272 Protocol Manipulation Medium 12
- CAPEC-90 Reflection Attack in Authentication Protocol High
- CAPEC-220 Client-Server Protocol Manipulation Medium 5
  - CAPEC-33 HTTP Request Smuggling High
  - CAPEC-34 HTTP Response Splitting High
  - CAPEC-105 HTTP Request Splitting High
  - CAPEC-273 HTTP Response Smuggling High
  - CAPEC-274 HTTP Verb Tampering Medium
- CAPEC-276 Inter-component Protocol Manipulation 1
  - CAPEC-665 Exploitation of Thunderbolt Protection Flaws Very High
- CAPEC-277 Data Interchange Protocol Manipulation
- CAPEC-278 Web Services Protocol Manipulation 1
  - CAPEC-279 SOAP Manipulation High
CAPEC-390 Bypassing Physical Security 10
- CAPEC-391 Bypassing Physical Locks 3
  - CAPEC-392 Lock Bumping
  - CAPEC-393 Lock Picking
  - CAPEC-394 Using a Snap Gun Lock to Force a Lock
- CAPEC-395 Bypassing Electronic Locks and Access Controls 5
  - CAPEC-397 Cloning Magnetic Strip Cards
  - CAPEC-398 Magnetic Strip Card Brute Force Attacks
  - CAPEC-399 Cloning RFID Cards or Chips
  - CAPEC-400 RFID Chip Deactivation or Destruction
  - CAPEC-626 Smudge Attack
CAPEC-410 Information Elicitation Low
CAPEC-416 Manipulate Human Behavior Medium 21
- CAPEC-407 Pretexting Low 5
  - CAPEC-383 Harvesting Information via API Event Monitoring Low
  - CAPEC-412 Pretexting via Customer Service Low
  - CAPEC-413 Pretexting via Tech Support Low
  - CAPEC-414 Pretexting via Delivery Person Low
  - CAPEC-415 Pretexting via Phone Low
- CAPEC-417 Influence Perception Low 6
  - CAPEC-418 Influence Perception of Reciprocation Medium
  - CAPEC-420 Influence Perception of Scarcity Low
  - CAPEC-421 Influence Perception of Authority Low
  - CAPEC-422 Influence Perception of Commitment and Consistency Low
  - CAPEC-423 Influence Perception of Liking Low
  - CAPEC-424 Influence Perception of Consensus or Social Proof Low
- CAPEC-425 Target Influence via Framing Low
- CAPEC-426 Influence via Incentives Low
- CAPEC-427 Influence via Psychological Principles Low 5
  - CAPEC-428 Influence via Modes of Thinking Low
  - CAPEC-429 Target Influence via Eye Cues Low
  - CAPEC-433 Target Influence via The Human Buffer Overflow Low
  - CAPEC-434 Target Influence via Interview and Interrogation Low
  - CAPEC-435 Target Influence via Instant Rapport Low
CAPEC-438 Modification During Manufacture 23
- CAPEC-444 Development Alteration High 15
  - CAPEC-206 Signing Malicious Code Very High
  - CAPEC-443 Malicious Logic Inserted Into Product by Authorized Developer High
  - CAPEC-445 Malicious Logic Insertion into Product Software via Configuration Management Manipulation High
  - CAPEC-446 Malicious Logic Insertion into Product via Inclusion of Third-Party Component High
  - CAPEC-511 Infiltration of Software Development Environment High
  - CAPEC-516 Hardware Component Substitution During Baselining High
  - CAPEC-520 Counterfeit Hardware Component Inserted During Product Assembly High
  - CAPEC-532 Altered Installed BIOS High
  - CAPEC-537 Infiltration of Hardware Development Environment High
  - CAPEC-538 Open-Source Library Manipulation High
  - CAPEC-539 ASIC With Malicious Functionality High
  - CAPEC-670 Software Development Tools Maliciously Altered High
  - CAPEC-672 Malicious Code Implanted During Chip Programming High
  - CAPEC-673 Developer Signing Maliciously Altered Software High
  - CAPEC-678 System Build Data Maliciously Altered High
- CAPEC-447 Design Alteration High 6
  - CAPEC-517 Documentation Alteration to Circumvent Dial-down High
  - CAPEC-518 Documentation Alteration to Produce Under-performing Systems High
  - CAPEC-519 Documentation Alteration to Cause Errors in System Design High
  - CAPEC-521 Hardware Design Specifications Are Altered High
  - CAPEC-671 Requirements for ASIC Functionality Maliciously Altered High
  - CAPEC-674 Design for FPGA Maliciously Altered High
CAPEC-439 Manipulation During Distribution 3
- CAPEC-522 Malicious Hardware Component Replacement High
- CAPEC-523 Malicious Software Implanted High
- CAPEC-524 Rogue Integration Procedures High
CAPEC-440 Hardware Integrity Attack High 7
- CAPEC-401 Physically Hacking Hardware High 1
  - CAPEC-402 Bypassing ATA Password Security
- CAPEC-534 Malicious Hardware Update High 4
  - CAPEC-531 Hardware Component Substitution High 2
    CAPEC-530 Provide Counterfeit Component High
    CAPEC-535 Malicious Gray Market Hardware High
  - CAPEC-677 Server Motherboard Compromise High
CAPEC-441 Malicious Logic Insertion High 7
- CAPEC-442 Infected Software High 1
  - CAPEC-448 Embed Virus into DLL High
- CAPEC-452 Infected Hardware High 1
  - CAPEC-638 Altered Component Firmware Very High
- CAPEC-456 Infected Memory High 2
  - CAPEC-457 USB Memory Attacks High
  - CAPEC-458 Flash Memory Attacks
CAPEC-507 Physical Theft
CAPEC-548 Contaminate Resource High
CAPEC-549 Local Execution of Code High 9
- CAPEC-542 Targeted Malware 8
  - CAPEC-550 Install New Service
  - CAPEC-551 Modify Existing Service
  - CAPEC-552 Install Rootkit High
  - CAPEC-556 Replace File Extension Handlers
  - CAPEC-558 Replace Trusted Executable High
  - CAPEC-564 Run Software at Logon
  - CAPEC-579 Replace Winlogon Helper DLL
  - CAPEC-698 Install Malicious Extension High
CAPEC-554 Functionality Bypass High 3
- CAPEC-179 Calling Micro-Services Directly Medium
- CAPEC-464 Evercookie Medium
- CAPEC-465 Transparent Proxy Abuse Medium
CAPEC-560 Use of Known Domain Credentials High 8
- CAPEC-555 Remote Services with Stolen Credentials Very High
- CAPEC-600 Credential Stuffing High
- CAPEC-652 Use of Known Kerberos Credentials High 2
  - CAPEC-509 Kerberoasting High
  - CAPEC-645 Use of Captured Tickets (Pass The Ticket) High
- CAPEC-653 Use of Known Operating System Credentials High 2
  - CAPEC-561 Windows Admin Shares with Stolen Credentials
  - CAPEC-644 Use of Captured Hashes (Pass The Hash) High
CAPEC-586 Object Injection High
CAPEC-594 Traffic Injection 2
- CAPEC-595 Connection Reset 1
  - CAPEC-596 TCP RST Injection
CAPEC-607 Obstruction 13
- CAPEC-547 Physical Destruction of Device or Component
- CAPEC-582 Route Disabling High 3
  - CAPEC-583 Disabling Network Hardware
  - CAPEC-584 BGP Route Disabling
  - CAPEC-585 DNS Domain Seizure
- CAPEC-601 Jamming High 3
  - CAPEC-559 Orbital Jamming High
  - CAPEC-604 Wi-Fi Jamming High
  - CAPEC-605 Cellular Jamming Low
- CAPEC-603 Blockage High 3
  - CAPEC-96 Block Access to Libraries Medium
  - CAPEC-589 DNS Blocking
  - CAPEC-590 IP Address Blocking High
CAPEC-624 Hardware Fault Injection High 1
- CAPEC-625 Mobile Device Fault Injection
CAPEC-690 Metadata Spoofing High 3
- CAPEC-691 Spoof Open-Source Software Metadata High 2
  - CAPEC-692 Spoof Version Control System Commit Metadata High
  - CAPEC-693 StarJacking High

Retired by MITRE (57)

CAPEC-5 Blue Boxing Very High
CAPEC-56 Removing/short-circuiting 'guard logic'
CAPEC-82 Violating Implicit Assumptions Regarding XML Content (aka XML Denial of Service (XDoS))
CAPEC-91 XSS in IMG Tags
CAPEC-99 XML Parser Attack
CAPEC-106 XSS through Log Files
CAPEC-171 Variable Manipulation
CAPEC-205 Lifting credential(s)/key material embedded in client distributions (thick or thin)
CAPEC-211 Leveraging web tools (e.g. Mozilla's GreaseMonkey, Firebug) to change application behavior
CAPEC-213 Directory Traversal
CAPEC-214 Fuzzing for garnering J2EE/.NET-based stack traces, for application mapping
CAPEC-235 Implementing a callback to system routine (old AWT Queue)
CAPEC-236 Catching exception throw/signal from privileged block
CAPEC-238 Using URL/codebase / G.A.C. (code source) to convince sandbox of privilege
CAPEC-239 Subversion of Authorization Checks: Cache Filtering, Programmatic Security, etc.
CAPEC-241 Code Injection
CAPEC-246 XSS Using Flash
CAPEC-249 Linux Terminal Injection
CAPEC-254 DTD Injection in a SOAP Message
CAPEC-257 Abuse of Transaction Data Structure
CAPEC-258 Passively Sniffing and Capturing Application Code Bound for an Authorized Client During Dynamic Update
CAPEC-259 Passively Sniffing and Capturing Application Code Bound for an Authorized Client During Patching
CAPEC-260 Passively Sniffing and Capturing Application Code Bound for an Authorized Client During Initial Distribution
CAPEC-264 Environment Variable Manipulation
CAPEC-265 Global variable manipulation
CAPEC-266 Manipulate Canonicalization
CAPEC-269 Registry Manipulation
CAPEC-280 SOAP Parameter Tampering
CAPEC-288 ICMP Echo Request Ping Low
CAPEC-289 Infrastructure-based footprinting
CAPEC-311 OS Fingerprinting
CAPEC-314 IP Fingerprinting Probes
CAPEC-315 TCP/IP Fingerprinting Probes
CAPEC-316 ICMP Fingerprinting Probes
CAPEC-396 Bypassing Card or Badge-Based Systems
CAPEC-404 Social Information Gathering Attacks
CAPEC-405 Social Information Gathering via Research
CAPEC-408 Information Gathering from Traditional Sources
CAPEC-409 Information Gathering from Non-Traditional Sources
CAPEC-411 Pretexting
CAPEC-419 Target Influence via Perception of Concession
CAPEC-430 Target Influence via Micro-Expressions
CAPEC-431 Target Influence via Neuro-Linguistic Programming (NLP)
CAPEC-432 Target Influence via Voice in NLP
CAPEC-449 Malware Propagation via USB Stick
CAPEC-450 Malware Propagation via USB U3 Autorun
CAPEC-451 Malware Propagation via Infected Peripheral Device
CAPEC-453 Malicious Logic Insertion via Counterfeit Hardware
CAPEC-454 Modification of Existing Components with Counterfeit Hardware
CAPEC-455 Malicious Logic Insertion via Inclusion of Counterfeit Hardware Components
CAPEC-484 XML Client-Side Attack
CAPEC-557 Schedule Software To Run
CAPEC-566 Dump Password Hashes
CAPEC-567 Obtain Data via Utilities
CAPEC-570 Signature-Based Avoidance
CAPEC-602 Degradation
CAPEC-629 Unauthorized Use of Device Resources