CAPEC-65 Sniff Application Code

Abstraktion: detailedStatus: active

An adversary passively sniffs network communications and captures application code bound for an authorized client. Once obtained, they can use it as-is, or through reverse-engineering glean sensitive information or exploit the trust relationship between the client and server. Such code may belong to a dynamic update to the client, a patch being applied to a client component or any such interaction where the client is authorized to communicate with the server.

Wahrscheinlichkeit: LowSchweregrad: High
01

Schwächen (4)

Die CWE-Schwächeklassen, zu denen dies gehört.

02

ATT&CK-Techniken

ATT&CK-Techniken, die dies ermöglicht oder abbildet.

03

verwandte Angriffsmuster (1)

Verwandte Einträge.

04

Quelle

Wo diese Definition veröffentlicht ist.