CAPEC Library

Common Attack Pattern Enumeration

All Meta High-level categories Standard Specific patterns Detailed Implementation-level

Exploitation of Trusted Identifiers

Exploiting Trust in Client

Forced Deadlock

Leveraging Race Conditions

Manipulating State

Adversary in the Middle (AiTM)

Interface Manipulation

Authentication Abuse

Authentication Bypass

Privilege Abuse

Buffer Manipulation

Shared Resource Manipulation

Pointer Manipulation

Excessive Allocation

Resource Leak Exposure

Parameter Injection

Content Spoofing

Identity Spoofing

Input Data Manipulation

Resource Location Spoofing

Infrastructure Manipulation

File Manipulation

DEPRECATED: Variable Manipulation

Action Spoofing

Very High Medium

Configuration/Environment Manipulation

Software Integrity Attack

Reverse Engineering

Protocol Analysis

Functionality Misuse

Communication Channel Manipulation

Sustained Client Engagement

Privilege Escalation

Resource Injection

DEPRECATED: Code Injection

Command Injection

DEPRECATED: Abuse of Transaction Data Structure

DEPRECATED: Environment Variable Manipulation

DEPRECATED: Global variable manipulation

DEPRECATED: Manipulate Canonicalization

DEPRECATED: Registry Manipulation

Protocol Manipulation