Dark Mode

Settings

Capec-574 Detail

Services Footprinting

Standard Software Likelihood: Low Typical Severity: Low

Parents: 169

Threats: T60 T65 T80 T258 T288 T291 T302 T334 T392 T407

Tools: 6

Description

An adversary exploits functionality meant to identify information about the services on the target system to an authorized user. By knowing what services are registered on the target system, the adversary can learn about the target environment as a means towards further malicious behavior. Depending on the operating system, commands that can obtain services information include "sc" and "tasklist/svc" using Tasklist, and "net start" using Net.

Not present

External ID Source Link Description
CAPEC-574 capec https://capec.mitre.org/data/definitions/574.html
CWE-200 cwe http://cwe.mitre.org/data/definitions/200.html
T1007 ATTACK https://attack.mitre.org/wiki/Technique/T1007 System Service Discovery

Not present

  1. The adversary must have gained access to the target system via physical or logical means in order to carry out this attack.

Not present

Not present

Authorization Access Control Confidentiality
Bypass Protection Mechanism Bypass Protection Mechanism Other
Hide Activities Hide Activities Bypass Protection Mechanism
Hide Activities

Not present