CAPECattack pattern
CAPEC-497 File Discovery
Very Low
Official page ↗
- Abstraction
- Standard
- Status
- Draft
- Likelihood of attack
- High
- Typical severity
- Very Low
- CAPEC version
- 3.9
Description
An adversary engages in probing and exploration activities to determine if common key files exists. Such files often contain configuration and security parameters of the targeted application, system or network. Using this knowledge may often pave the way for more damaging attacks.
Prerequisites
• The adversary must know the location of these common key files.
Consequences
• Confidentiality: Read Data
Mitigations
• Leverage file protection mechanisms to render these files accessible only to authorized parties.
Related
Att&ck technique · MITRE ATT&CK (1)
- T1083 File and Directory Discovery technique
Child of · CAPEC (1)
- CAPEC-169 Footprinting attack pattern
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
Referenced by CAPEC · child of (1)
- CAPEC-149 Explore for Predictable Temporary File Names attack pattern
Referenced by CWE · attack pattern (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness