CAPEC-497 File Discovery

abstraction: standardstatus: active

An adversary engages in probing and exploration activities to determine if common key files exists. Such files often contain configuration and security parameters of the targeted application, system or network. Using this knowledge may often pave the way for more damaging attacks.

likelihood: Highseverity: Very Low
01

weaknesses (1)

The CWE weakness classes this flaw belongs to.

02

ATT&CK techniques

ATT&CK techniques this enables or maps to.

03

related attack patterns (2)

Related entries.

04

source

Where this definition is published.