T0866_exploitation-of-remote-services
Adversaries may exploit a software vulnerability to take advantage of a programming error in a program, service, or within the operating system software or kernel itself to enable remote service ab...
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Adversaries may exploit a software vulnerability to take advantage of a programming error in a program, service, or within the operating system software or kernel itself to enable remote service ab...
Adversaries may gather information about a PLCs or controllers current operating mode.
Adversaries may establish command and control capabilities over commonly used application layer protocols such as HTTP(S), OPC, RDP, telnet, DNP3, and modbus.
Adversaries may attempt to leverage Application Program Interfaces (APIs) used for communication between control software and the hardware.
Adversaries may hook into application programming interface (API) functions used by processes to redirect calls for execution and privilege escalation means.
Adversaries may seek to capture process values related to the inputs and outputs of a PLC.
Adversaries may target protection function alarms to prevent them from notifying operators of critical conditions.
Adversaries may cause damage and destruction of property to infrastructure, equipment, and the surrounding environment when attacking control systems.
Adversaries may compromise safety system functions designed to maintain safe operation of a process when unacceptable or dangerous conditions occur.
Adversaries may stop or disable services on a system to render those services unavailable to legitimate users.