CAPEC-65 Sniff Application Code
Abstraktion: detailedStatus: activeAn adversary passively sniffs network communications and captures application code bound for an authorized client. Once obtained, they can use it as-is, or through reverse-engineering glean sensitive information or exploit the trust relationship between the client and server. Such code may belong to a dynamic update to the client, a patch being applied to a client component or any such interaction where the client is authorized to communicate with the server.
Wahrscheinlichkeit: LowSchweregrad: High
01
Schwächen (4)
Die CWE-Schwächeklassen, zu denen dies gehört.
02
ATT&CK-Techniken
ATT&CK-Techniken, die dies ermöglicht oder abbildet.
03
verwandte Angriffsmuster (1)
Verwandte Einträge.
04
Quelle
Wo diese Definition veröffentlicht ist.