CAPEC-300 Port Scanning

abstraction: standardstatus: active

An adversary uses a combination of techniques to determine the state of the ports on a remote target. Any service or application available for TCP or UDP networking will have a port open for communications over the network.

severity: Low

weaknesses (1)

The CWE weakness classes this flaw belongs to.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor

ATT&CK techniques

ATT&CK techniques this enables or maps to.

T1046Network Service Discovery

related attack patterns (10)

Related entries.

CAPEC-169Footprinting
CAPEC-287TCP SYN Scan
CAPEC-301TCP Connect Scan
CAPEC-302TCP FIN Scan
CAPEC-303TCP Xmas Scan
CAPEC-304TCP Null Scan
CAPEC-305TCP ACK Scan
CAPEC-306TCP Window Scan
CAPEC-307TCP RPC Scan
CAPEC-308UDP Scan

source

Where this definition is published.

MITRE CAPEC