CAPECattack pattern

CAPEC-309 Network Topology Mapping

Low Official page ↗
Abstraction
Standard
Status
Draft
Typical severity
Low
CAPEC version
3.9

Description

An adversary engages in scanning activities to map network nodes, hosts, devices, and routes. Adversaries usually perform this type of network reconnaissance during the early stages of attack against an external network. Many types of scanning utilities are typically employed, including ICMP tools, network mappers, port scanners, and route testing utilities such as traceroute.

Prerequisites

• None

Consequences

• Confidentiality: Other

Related

Att&ck technique · MITRE ATT&CK (3)

  • T1590 Gather Victim Network Information technique
  • T1016 System Network Configuration Discovery technique
  • T1049 System Network Connections Discovery technique

Can precede · CAPEC (1)

  • CAPEC-664 Server Side Request Forgery attack pattern

Child of · CAPEC (1)

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

Referenced by CAPEC · child of (4)

  • CAPEC-290 Enumerate Mail Exchange (MX) Records attack pattern
  • CAPEC-291 DNS Zone Transfers attack pattern
  • CAPEC-293 Traceroute Route Enumeration attack pattern
  • CAPEC-643 Identify Shared Files/Directories on System attack pattern

Referenced by CWE · attack pattern (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness