CAPEC

1. Mechanisms of Attack

   The mechanisms-of-attack view organizing all attack patterns hierarchically.

2. Domains of Attack

   Attack patterns grouped by domain such as software, hardware, supply chain and social engineering.

3. Engage in Deceptive Interactions

   Spoofing, phishing and impersonation attack patterns.

4. Inject Unexpected Items

   Injection patterns such as SQL injection and command injection.

5. Abuse Existing Functionality

   Misusing legitimate features to cause harm.

6. Subvert Access Control

   Bypassing authentication and authorization controls.

7. Manipulate Data Structures

   Altering data structures such as buffers and files.

8. Manipulate System Resources

   Resource manipulation and denial-of-service patterns.

9. Collect and Analyze Information

   Reconnaissance and information-gathering patterns.

10. Employ Probabilistic Techniques

    Brute force and fuzzing patterns.

11. Supply Chain

    Attacks on the software and hardware supply chain.

12. SQL Injection

    CAPEC-66, injecting SQL through unsanitized input.

13. Cross-Site Scripting

    CAPEC-63, injecting script into pages viewed by other users.

14. Cross Site Request Forgery

    CAPEC-62, forcing authenticated users to perform actions.

Each section links to the official page. Titles and summaries by Extra Credit; the docs belong to their authors.