CAPEC-701 Browser in the Middle (BiTM)

abstraction: standardstatus: active

An adversary exploits the inherent functionalities of a web browser, in order to establish an unnoticed remote desktop connection in the victim's browser to the adversary's system. The adversary must deploy a web client with a remote desktop session that the victim can access.

likelihood: Mediumseverity: High
01

weaknesses (2)

The CWE weakness classes this flaw belongs to.

02

related attack patterns (1)

Related entries.

03

source

Where this definition is published.