CAPEC-143 Detect Unpublicized Web Pages

An adversary searches a targeted web site for web pages that have not been publicized. In doing this, the adversary may be able to gain access to information that the targeted site did not intend to make public.

1. [Explore] [Find target web site] An adversary finds a target web site that they think may have unpublicized web pages 2. [Explore] [Map the published web site] The adversary will map the published web site either by using an automated tool or by manually accessing well-known debugging or logging pages, or otherwise predictable pages within the site tree 3. [Experiment] [Try to find weaknesses or information] The adversary will try to find weaknesses or information on the unpublicized pages that the targeted site did not intend to be public 4. [Exploit] [Follow-up attack] Use any information or weaknesses found to carry out a follow-up attack

• The targeted web site must include pages within its published tree that are not connected to its tree of links. The sensitivity of the content of these pages determines the severity of this attack.