CAPEC 116 Excavation

Description

🇬🇧 English Original 🇮🇹 Italiano AI Translated

An adversary actively probes the target in a manner that is designed to solicit information that could be leveraged for malicious purposes.

AI Generated Translation

"Un avversario effettua attivamente un probing del target in modo da ottenere informazioni che potrebbero essere sfruttate per scopi malevoli."

Mitigations

2

Minimize Error/Response Output To Only What Is Necessary For Functional Use Or Corrective Language.

Remove Potentially Sensitive Information That Is Not Necessary For The Application'S Functionality.

Consequences

Security Scopes Affected

Confidentiality

Potential Impacts

Read Data

Relationships

Child CAPECs

CAPEC-54 Query System for Information CAPEC-150 Collect Data from Common Resource Locations CAPEC-545 Pull Data from System Resources CAPEC-569 Collect Data as Provided by Users CAPEC-675 Retrieve Data from Decommissioned Devices

Resources Required

1

A tool, such as an Adversary in the Middle (CAPEC-94) Proxy or a fuzzer, that is capable of generating and injecting custom inputs to be used in the attack.