CAPEC - Common Attack Pattern Enumeration and Classification (CAPEC™)

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <?xml version="1.0"?> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8" /> <meta name="description" content="Common Attack Pattern Enumeration and Classification (CAPEC) is a list of software weaknesses." /> <meta http-equiv="X-UA-Compatible" content="IE=Edge"> <link rel="shortcut icon" href="/favicon.ico" /> <link href="/css/main.css?version=3.6.102121" rel="stylesheet" type="text/css" />  <script src="/includes/jquery.js" language="JavaScript" type="text/javascript"></script> <script src="/includes/capec_minimizer.js" language="JavaScript" type="text/javascript"></script> <script src="/includes/browserheight.js" language="JavaScript" type="text/javascript"></script> <script src="/includes/cookie.js" language="Javascript" type="text/javascript"></script> <script src=https://cmp.osano.com/AzyhULTdPkqmy4aDN/a02172fb-4011-47ed-b5ff-3ae82caa92f9/osano.js></script> <link href="/css/print.css?version=1.0" rel="stylesheet" media="print" type="text/css" /> <noscript> <style> #script { visibility:collapse; visibility:hidden; font-size:0px; height:0px; width:0px } #noscript { visibility:visible; font-size:inherit; height:inherit; width:inherit} </style> </noscript> <title>CAPEC - Common Attack Pattern Enumeration and Classification (CAPEC™)</title> </head> <body bgcolor="#eeeeee" onload="onloadCookie()"> <div style="background-color:#ffffff;"> <a name="top" id="top"></a> <div id="MastHead"> <table width="100%" border="0" cellspacing="0" cellpadding="0" summary="Masthead Table"> <tr> <th style="width:70%"/> <th style="width:30%"/> </tr> <tr> <td align="left" style="padding:20px 10px 10px 20px" valign="middle" nowrap="nowrap"> <a href="/index.html" style="color:#32498D; text-decoration:none"> <div> <img src="/images/capec_logo_new2.gif" width="160" height="55" style="float:left;border:0;margin-right:6px" alt="CAPEC" /> <h1 style="color:#edef97;font-size:1.2em;font-family:'Verdana',sans-serif;text-shadow: 2px 2px #000;margin: .1em auto">Common Attack Pattern Enumeration and Classification</h1> <p style="color:#fff;font-size:1em;text-shadow: 2px 2px #000;margin:.2em auto 0 auto">A Community Resource for Identifying and Understanding Attacks</p> </a> </div> </td> <td> <div style="float:right;padding-top:0px;padding-right:14px;padding-bottom:0px;"><a href="/about/new_to_capec.html" title="New to CAPEC? Start Here"><img src="/images/new_to_capec.png" width=100" height="100" border="0" alt="New to CAPEC? Start Here" style="vertical-align:top"/></a></div> </td> </tr> </table> </div> <div id="HeaderBar" class="noprint"> <table width="100%" border="0" cellpadding="0" cellspacing="0" summary="Breadcrumbs and Search Table"> <tr> <td width="100%" valign="middle" align="left" style="padding-left:10px; font-size:75%;">   </td> <td valign="middle" align="right" nowrap="nowrap" style="padding-right:12px"> <div class="noprint" style="text-align:right"> <form action="/cgi-bin/jumpmenu.cgi" style="margin-bottom:0.1em;vertical-align:center;"> <label for="id" style="padding-right:5px">ID Lookup:</label> <input id="id" name="id" type="text" style="width:50px; font-size:80%" maxlength="10" /> <input value="Go" style="padding: 0px; font-size:80%" type="submit" /> </form> </div> </td> </tr> </table> </div>  <div class="yesprint"> <hr width="100%" size="1" style="clear:both" color="#000000" /> </div> <div class="topnav"> <ul> <li><a href="/index.html">Home</a></li> <li> <div class="dropdown"> <a href="/about/index.html"><button class="dropbtn">About</button></a> <div class="dropdown-content"> <a href="/about/index.html">Overview</a> <a href="/about/board.html">Board</a> <a href="/about/glossary.html">Glossary</a> <a href="/about/use_cases.html">Use Cases</a> <a href="/about/resources.html">Resources</a> <a href="/about/documents.html">Documents</a> <a href="/about/faq.html">FAQs</a> <a href="/about/new_to_capec.html">New to CAPEC?</a> </div> </div> </li> <li> <div class="dropdown"> <a href="/data/index.html"><button class="dropbtn">CAPEC List</button></a> <div class="dropdown-content"> <a href="/data/index.html">Latest Version</a> <a href="/data/downloads.html">Downloads</a> <a href="/data/reports.html">Reports</a> <a href="/data/archive.html">Archive</a> </div> </div> </li> <li> <div class="dropdown"> <a href="/community/index.html"><button class="dropbtn">Community</button></a> <div class="dropdown-content"> <a href="/community/index.html">Community</a> <a href="/community/citations.html">Citations</a> <a href="/community/usage.html">Organization Usage</a> <a href="/community/related.html">Related Activities</a> <a href="/community/registration.html">Discussion List</a> <a href="https://www.mail-archive.com/capec-research-list@mitre.org/" target="_blank" rel="noopener noreferrer">Discussion Archives</a> <a href="/about/documents.html#capec_user_summit">CAPEC User Summit</a> </div> </div> </li> <li> <div class="dropdown"> <a href="/news/index.html"><button class="dropbtn">News</button></a> <div class="dropdown-content"> <a href="/news/index.html">Current News</a> <a href="https://twitter.com/CweCapec" target="_blank" rel="noopener noreferrer">CAPEC on Twitter<img src="/images/twitter_sm.png" border="0" title="Twitter" style="position:relative; vertical-align:bottom; padding-left:3px; top:-1px"></a> <a href="https://www.linkedin.com/showcase/cve-cwe-capec" target="_blank" rel="noopener noreferrer">CAPEC on LinkedIn<img src="/images/linkedin_sm.jpg" alt="LinkedIn" width="12" height="12" style="position:relative; vertical-align:bottom; padding-left:3px; top:-1px"></a> <a href="https://medium.com/@CWE_CAPEC" target="_blank" rel="noopener noreferrer">CAPEC Blog <img src="/images/medium.png" alt="Medium" width="12" height="12" style="position:relative; vertical-align:bottom; padding-left:3px; top:-1px"></a> <a href="https://outofbounds.buzzsprout.com/" target="_blank" rel="noopener noreferrer">CAPEC Podcast<img src="/images/out_of_bounds_read_logo_B_W.png" alt="Out of Bounds Read Podcast" width="15" height="15" style="position:relative; vertical-align:bottom; padding-left:3px; top:-1px"></a> <a href="https://www.youtube.com/channel/UCpY9VIpRmFK4ebD6orssifA" target="_blank" rel="noopener noreferrer">CAPEC on YouTube<img src="/images/youtube.png" alt="YouTube" width="12" height="12" style="position:relative; vertical-align:bottom; padding-left:3px; top:-1px"></a> <a href="/news/archives/index.html">News Archive</a> </div> </div> </li> <li style="border-color:#aaaaaa"><a href="/find/index.html">Search</a></li> </ul> </div> <table width="100%" border="0" cellspacing="0" cellpadding="0" id="MainPane"> <tr>  <td valign="top" rowspan="2" id="LeftPane">  <script type="text/javascript">browserheight();</script> </td>  <td style="height:1px"></td>  <td valign="top" align="center" rowspan="2" nowrap="nowrap" id="RightPane"> </td>  </tr> <tr>  <td valign="top" id="Contentpane" width="100%" style="word-wrap:break-word"> <script type="text/javascript"> $("#Contentpane").css('max-width', ($(window).width()-230) + 'px'); </script>  <div class="mainpage"> <div class="introtext" style="font-weight:normal;padding-left:5%;padding-right:5%;"> Understanding how the adversary operates is essential to effective cybersecurity. CAPEC™ helps by providing a comprehensive dictionary of known patterns of attack employed by adversaries to exploit known weaknesses in cyber-enabled capabilities. It can be used by analysts, developers, testers, and educators to advance community understanding and enhance defenses.</div> <br> <table style="width:100%;padding-left:2%;padding-right:2%;"> <tr> <td style="width:25%;"> <table style="width:100%;min-height:315px;" class="SideBar"> <tr> <th class="HighlightBar">CAPEC List Quick Access</th> </tr> <tr> <td> <div class="TitleRed"><strong>Search CAPEC</strong></div> <div id="SearchBox" title="Easily find a specific attack pattern by performing a search of the CAPEC List by keywords(s) or by CAPEC-ID Number. To search by multiple keywords, separate each by a space.">  <script async src="https://cse.google.com/cse.js?cx=012899561505164599335:sxqdbjuqaxm"></script> <div class="gcse-searchbox"></div>  </div> <br/> <div class="TitleRed"><strong>View CAPEC</strong></div> <div class="center"> <a href="/data/definitions/1000.html"> <button type="button" title="This view organizes attack patterns hierarchically based on mechanisms that are frequently employed when exploiting a vulnerability. The categories that are members of this view represent the different techniques used to attack a system.">by Mechanisms of Attack</button> </a> <br/> <a href="/data/definitions/3000.html"> <button type="button" title="This view organizes attack patterns hierarchically based on the attack domain.">by Domains of Attack</button> </a> <br/> <a href="/data/index.html"> <button type="button" title="This page lists alternative heirarchical, external mapping, and other helpful View presentations for CAPEC.">by Other Criteria</button> </a> </div> <br/> <div class="center">Total Attack Patterns: 559</div> <br/> </td> </tr> </table> </td> <td style="width:50%;"> <table style="width:100%;padding-left:2%;padding-right:2%;height:350px;" id="HighlightTable"> <tr> <td colspan="2"> <div style="width:100%"> <div style="float:left;padding-top:8px;text-align:right;padding-right:10px;padding-bottom:8px;"><a href="/about/new_to_capec.html" title="New to CAPEC? Start Here!"><img src="/images/new_to_capec.png" width="130" border="0" alt="New to CAPEC" style="vertical-align:bottom"></a></div> <h4><strong>New to CAPEC?</strong></h4> <p>Common Attack Pattern Enumerations and Classifications (CAPEC™) can be overwhelming to someone new to cyber-attack patterns. This page offers tips on how to familiarize yourself with what CAPEC has to offer, before more fully exploring this extensive knowledge base.</p> </div> </td> </tr> <tr> <td class="HighlightBar center" colspan="2">Community Engagement</td> </tr> <tr> <td style"text-align:left;">If you would like to be a part of ongoing discussions related to MITRE’s work in shifting the balance of cybersecurity risk, please visit the <a href="https://cwe.mitre.org/">Common Weakness Enumeration (CWE™)</a> website.</td> </tr> </table> </td> <td style="width:25%;"> <table style="width:100%;padding-top:0%;min-height:315px;" class="SideBar"> <tr> <th class="HighlightBar">CAPEC News</th> </tr> <tr> <td> <div><span class="SideBarNewsType">News</span> <span class="SideBarNews"><a href="/news/index.html#march_13_2023_Thank_You_for_Responding_to_CAPEC_Stakeholder_Survey">Thank You for Responding to the CAPEC Stakeholder Community Survey</a></span></div> <br/> <div><span class="SideBarNewsType">News</span> <span class="SideBarNews"><a href="/news/index.html#january_24_2023_CAPEC_List_Version_3.9_Now_Available">CAPEC List Version 3.9 Now Available</a></span></div> <br/> <div><span class="SideBarNewsType">Blog</span> <span class="SideBarNews"><a href="https://medium.com/@CWE_CAPEC/community-actively-working-to-enhance-cwes-ics-ot-coverage-1b4f7bf0a6dd" target="_blank" rel="noopener noreferrer">Community Actively Working to Enhance CWE’s ICS/OT Coverage</a></span></div> <br/> <div><span class="SideBarNewsType">Podcast</span> <span class="SideBarNews"><a href="https://youtu.be/MdMm42bjdGU" target="_blank" rel="noopener noreferrer">“Using CWE/CAPEC in Education”</a></span></div> <br/> <br/> <div class="center"><a href="/news/index.html">More >> </a></div> <br/> </td> </tr> </table> </td> </tr> </table> </div>  <div class="gcse-searchresults"></div>   <div id="More_Message"> <div style="background-color:#33332C; padding:2px; color:#ffffff; font-size:95%; text-align:center" >More information is available — Please select a different filter.</div></div> </td>  </tr> </table> <div id="FootPane" class="noprint"> <div id="footbar"> <b>Page Last Updated or Reviewed: </b> July 06, 2023 </div> <div class="Footer noprint"> <table width="100%" cellpadding="0" cellspacing="0" border="0" class="ltgreybackground" style="clear:both" summary="Footer Table"> <tr> <td colspan="3" id="line"><div class="line"> </div></td> </tr> <tr> <td valign="middle" nowrap="nowrap"> <div id="footerlinks" class="footlogo"> <a href="https://www.mitre.org" target="_blank"><img src="/images/mitre_logo.gif" height="36" border="0" alt="MITRE"/></a> </div> </td> <td width="100%" valign="top" style="padding:6px 0px;"> <div id="footerlinks"> <a href="/sitemap.html">Site Map</a> | <a href="/about/termsofuse.html">Terms of Use</a> | <a href="#" onclick="Osano.cm.showDrawer('osano-cm-dom-info-dialog-open')">Manage Cookies</a> | <a target="_blank" href="/about/cookie_notice.html">Cookie Notice</a> | <a target="_blank" href="https://cwe.mitre.org/about/privacy_policy.html">Privacy Policy</a> | <a href="mailto:capec@mitre.org">Contact Us</a> | <a target="_blank" href="https://twitter.com/CweCapec"><img src="/images/twitter.jpg" width="20" height="20" style="border:0;vertical-align:right;" alt="CAPEC on Twitter" title="CAPEC on Twitter"></a> <a target="_blank" href="https://www.linkedin.com/showcase/cve-cwe-capec"><img src="/images/linkedin_sm.jpg" width="20" height="20" style="border:0;vertical-align:right;" alt="CAPEC on LinkedIn" title="CAPEC on LinkedIn"></a> <a target="_blank" href="https://www.youtube.com/channel/UCpY9VIpRmFK4ebD6orssifA"><img src="/images/youtube.png" width="20" height="20" style="border:0;vertical-align:right;" alt="CAPEC on YouTube" title="CAPEC on YouTube"></a> <a target="_blank" href="https://outofbounds.buzzsprout.com/"><img src="/images/out_of_bounds_read_sm.png" width="20" height="20" style="border:0;vertical-align:right;" alt="CAPEC Out-of-Bounds-Read Podcast" title="CAPEC Out-of-Bounds-Read Podcast"></a> <a target="_blank" href="https://medium.com/@CWE_CAPEC"><img src="/images/medium.png" width="20" height="20" style="border:0;vertical-align:right;" alt="CAPEC Blog on Medium" title="CAPEC Blog on Medium"></a> </div> <p>Use of the Common Attack Pattern Enumeration and Classification (CAPEC), and the associated references from this website are subject to the <a href="/about/termsofuse.html">Terms of Use</a>. Copyright © 2007–2025, The MITRE Corporation. CAPEC and the CAPEC logo are trademarks of The MITRE Corporation.</p> </td> <td valign="middle" nowrap="nowrap"> <div id="footerlinks" class="footlogo"> <a href="https://www.dhs.gov/science-and-technology/hssedi" target="_blank" rel="noopener noreferrer"><img src="/images/hssedi.png" height="36" border="0" alt="HSSEDI" title="HSSEDI"/></a> </div> </td> </tr> </table> </div> </div>  <script src=https://cmp.osano.com/AzyhULTdPkqmy4aDN/a02172fb-4011-47ed-b5ff-3ae82caa92f9/osano.js></script>  <script async src="https://www.googletagmanager.com/gtag/js?id=G-SB6E7FR4V4"></script> <script> window.dataLayer = window.dataLayer || []; function gtag(){dataLayer.push(arguments);} gtag('js', new Date()); gtag('config', 'G-SB6E7FR4V4'); </script> </body> </html>

CINXE.COM

CAPEC - Common Attack Pattern Enumeration and Classification (CAPEC™)