CAPEC-65 Sniff Application Code

abstraction: detailedstatus: active

An adversary passively sniffs network communications and captures application code bound for an authorized client. Once obtained, they can use it as-is, or through reverse-engineering glean sensitive information or exploit the trust relationship between the client and server. Such code may belong to a dynamic update to the client, a patch being applied to a client component or any such interaction where the client is authorized to communicate with the server.

likelihood: Lowseverity: High
01

weaknesses (4)

The CWE weakness classes this flaw belongs to.

02

ATT&CK techniques

ATT&CK techniques this enables or maps to.

03

related attack patterns (1)

Related entries.

04

source

Where this definition is published.