@stroq/cli 0.10.1 → 0.11.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +19 -12
- package/dist/asi.json +19 -0
- package/dist/atlas.json +993 -0
- package/dist/corpus.json +362 -0
- package/dist/index.js +2058 -334
- package/dist/scope.json +426 -0
- package/openclaw-plugin/openclaw.plugin.json +1 -1
- package/openclaw-plugin/package.json +1 -1
- package/package.json +1 -1
package/dist/atlas.json
ADDED
|
@@ -0,0 +1,993 @@
|
|
|
1
|
+
{
|
|
2
|
+
"release": "2026.08",
|
|
3
|
+
"formatVersion": "6.0.0",
|
|
4
|
+
"source": "https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/v6/ATLAS-2026.08.yaml",
|
|
5
|
+
"sha256": "a8d32f676854cc57721c217ec5b39f07db518076dee4a6c1335df0a7bc8271a2",
|
|
6
|
+
"techniques": [
|
|
7
|
+
{
|
|
8
|
+
"id": "AML.T0000",
|
|
9
|
+
"name": "Search Open Technical Databases",
|
|
10
|
+
"parent": null
|
|
11
|
+
},
|
|
12
|
+
{
|
|
13
|
+
"id": "AML.T0000.000",
|
|
14
|
+
"name": "Journals and Conference Proceedings",
|
|
15
|
+
"parent": "AML.T0000"
|
|
16
|
+
},
|
|
17
|
+
{
|
|
18
|
+
"id": "AML.T0000.001",
|
|
19
|
+
"name": "Pre-Print Repositories",
|
|
20
|
+
"parent": "AML.T0000"
|
|
21
|
+
},
|
|
22
|
+
{
|
|
23
|
+
"id": "AML.T0000.002",
|
|
24
|
+
"name": "Technical Blogs",
|
|
25
|
+
"parent": "AML.T0000"
|
|
26
|
+
},
|
|
27
|
+
{
|
|
28
|
+
"id": "AML.T0001",
|
|
29
|
+
"name": "Search Open AI Vulnerability Analysis",
|
|
30
|
+
"parent": null
|
|
31
|
+
},
|
|
32
|
+
{
|
|
33
|
+
"id": "AML.T0002",
|
|
34
|
+
"name": "Acquire Public AI Artifacts",
|
|
35
|
+
"parent": null
|
|
36
|
+
},
|
|
37
|
+
{
|
|
38
|
+
"id": "AML.T0002.000",
|
|
39
|
+
"name": "Datasets",
|
|
40
|
+
"parent": "AML.T0002"
|
|
41
|
+
},
|
|
42
|
+
{
|
|
43
|
+
"id": "AML.T0002.001",
|
|
44
|
+
"name": "Models",
|
|
45
|
+
"parent": "AML.T0002"
|
|
46
|
+
},
|
|
47
|
+
{
|
|
48
|
+
"id": "AML.T0002.002",
|
|
49
|
+
"name": "AI Agent Configuration",
|
|
50
|
+
"parent": "AML.T0002"
|
|
51
|
+
},
|
|
52
|
+
{
|
|
53
|
+
"id": "AML.T0003",
|
|
54
|
+
"name": "Search Victim-Owned Websites",
|
|
55
|
+
"parent": null
|
|
56
|
+
},
|
|
57
|
+
{
|
|
58
|
+
"id": "AML.T0004",
|
|
59
|
+
"name": "Search Application Repositories",
|
|
60
|
+
"parent": null
|
|
61
|
+
},
|
|
62
|
+
{
|
|
63
|
+
"id": "AML.T0005",
|
|
64
|
+
"name": "Create Proxy AI Model",
|
|
65
|
+
"parent": null
|
|
66
|
+
},
|
|
67
|
+
{
|
|
68
|
+
"id": "AML.T0005.000",
|
|
69
|
+
"name": "Train Proxy via Gathered AI Artifacts",
|
|
70
|
+
"parent": "AML.T0005"
|
|
71
|
+
},
|
|
72
|
+
{
|
|
73
|
+
"id": "AML.T0005.001",
|
|
74
|
+
"name": "Train Proxy via Replication",
|
|
75
|
+
"parent": "AML.T0005"
|
|
76
|
+
},
|
|
77
|
+
{
|
|
78
|
+
"id": "AML.T0005.002",
|
|
79
|
+
"name": "Use Pre-Trained Model",
|
|
80
|
+
"parent": "AML.T0005"
|
|
81
|
+
},
|
|
82
|
+
{
|
|
83
|
+
"id": "AML.T0006",
|
|
84
|
+
"name": "Active Scanning",
|
|
85
|
+
"parent": null
|
|
86
|
+
},
|
|
87
|
+
{
|
|
88
|
+
"id": "AML.T0007",
|
|
89
|
+
"name": "Discover AI Artifacts",
|
|
90
|
+
"parent": null
|
|
91
|
+
},
|
|
92
|
+
{
|
|
93
|
+
"id": "AML.T0008",
|
|
94
|
+
"name": "Acquire Infrastructure",
|
|
95
|
+
"parent": null
|
|
96
|
+
},
|
|
97
|
+
{
|
|
98
|
+
"id": "AML.T0008.000",
|
|
99
|
+
"name": "AI Development Workspaces",
|
|
100
|
+
"parent": "AML.T0008"
|
|
101
|
+
},
|
|
102
|
+
{
|
|
103
|
+
"id": "AML.T0008.001",
|
|
104
|
+
"name": "Consumer Hardware",
|
|
105
|
+
"parent": "AML.T0008"
|
|
106
|
+
},
|
|
107
|
+
{
|
|
108
|
+
"id": "AML.T0008.002",
|
|
109
|
+
"name": "Domains",
|
|
110
|
+
"parent": "AML.T0008"
|
|
111
|
+
},
|
|
112
|
+
{
|
|
113
|
+
"id": "AML.T0008.003",
|
|
114
|
+
"name": "Physical Countermeasures",
|
|
115
|
+
"parent": "AML.T0008"
|
|
116
|
+
},
|
|
117
|
+
{
|
|
118
|
+
"id": "AML.T0008.004",
|
|
119
|
+
"name": "Serverless",
|
|
120
|
+
"parent": "AML.T0008"
|
|
121
|
+
},
|
|
122
|
+
{
|
|
123
|
+
"id": "AML.T0008.005",
|
|
124
|
+
"name": "AI Service Proxies",
|
|
125
|
+
"parent": "AML.T0008"
|
|
126
|
+
},
|
|
127
|
+
{
|
|
128
|
+
"id": "AML.T0010",
|
|
129
|
+
"name": "AI Supply Chain Compromise",
|
|
130
|
+
"parent": null
|
|
131
|
+
},
|
|
132
|
+
{
|
|
133
|
+
"id": "AML.T0010.000",
|
|
134
|
+
"name": "Hardware",
|
|
135
|
+
"parent": "AML.T0010"
|
|
136
|
+
},
|
|
137
|
+
{
|
|
138
|
+
"id": "AML.T0010.001",
|
|
139
|
+
"name": "AI Software",
|
|
140
|
+
"parent": "AML.T0010"
|
|
141
|
+
},
|
|
142
|
+
{
|
|
143
|
+
"id": "AML.T0010.002",
|
|
144
|
+
"name": "Data",
|
|
145
|
+
"parent": "AML.T0010"
|
|
146
|
+
},
|
|
147
|
+
{
|
|
148
|
+
"id": "AML.T0010.003",
|
|
149
|
+
"name": "Model",
|
|
150
|
+
"parent": "AML.T0010"
|
|
151
|
+
},
|
|
152
|
+
{
|
|
153
|
+
"id": "AML.T0010.004",
|
|
154
|
+
"name": "Container Registry",
|
|
155
|
+
"parent": "AML.T0010"
|
|
156
|
+
},
|
|
157
|
+
{
|
|
158
|
+
"id": "AML.T0010.005",
|
|
159
|
+
"name": "AI Agent Tool",
|
|
160
|
+
"parent": "AML.T0010"
|
|
161
|
+
},
|
|
162
|
+
{
|
|
163
|
+
"id": "AML.T0011",
|
|
164
|
+
"name": "User Execution",
|
|
165
|
+
"parent": null
|
|
166
|
+
},
|
|
167
|
+
{
|
|
168
|
+
"id": "AML.T0011.000",
|
|
169
|
+
"name": "Unsafe AI Artifacts",
|
|
170
|
+
"parent": "AML.T0011"
|
|
171
|
+
},
|
|
172
|
+
{
|
|
173
|
+
"id": "AML.T0011.001",
|
|
174
|
+
"name": "Malicious Package",
|
|
175
|
+
"parent": "AML.T0011"
|
|
176
|
+
},
|
|
177
|
+
{
|
|
178
|
+
"id": "AML.T0011.002",
|
|
179
|
+
"name": "Poisoned AI Agent Tool",
|
|
180
|
+
"parent": "AML.T0011"
|
|
181
|
+
},
|
|
182
|
+
{
|
|
183
|
+
"id": "AML.T0011.003",
|
|
184
|
+
"name": "Malicious Link",
|
|
185
|
+
"parent": "AML.T0011"
|
|
186
|
+
},
|
|
187
|
+
{
|
|
188
|
+
"id": "AML.T0012",
|
|
189
|
+
"name": "Valid Accounts",
|
|
190
|
+
"parent": null
|
|
191
|
+
},
|
|
192
|
+
{
|
|
193
|
+
"id": "AML.T0013",
|
|
194
|
+
"name": "Discover AI Model Ontology",
|
|
195
|
+
"parent": null
|
|
196
|
+
},
|
|
197
|
+
{
|
|
198
|
+
"id": "AML.T0014",
|
|
199
|
+
"name": "Discover AI Model Family",
|
|
200
|
+
"parent": null
|
|
201
|
+
},
|
|
202
|
+
{
|
|
203
|
+
"id": "AML.T0015",
|
|
204
|
+
"name": "Evade AI Model",
|
|
205
|
+
"parent": null
|
|
206
|
+
},
|
|
207
|
+
{
|
|
208
|
+
"id": "AML.T0016",
|
|
209
|
+
"name": "Obtain Capabilities",
|
|
210
|
+
"parent": null
|
|
211
|
+
},
|
|
212
|
+
{
|
|
213
|
+
"id": "AML.T0016.000",
|
|
214
|
+
"name": "Adversarial AI Attack Implementations",
|
|
215
|
+
"parent": "AML.T0016"
|
|
216
|
+
},
|
|
217
|
+
{
|
|
218
|
+
"id": "AML.T0016.001",
|
|
219
|
+
"name": "Software Tools",
|
|
220
|
+
"parent": "AML.T0016"
|
|
221
|
+
},
|
|
222
|
+
{
|
|
223
|
+
"id": "AML.T0016.002",
|
|
224
|
+
"name": "Generative AI",
|
|
225
|
+
"parent": "AML.T0016"
|
|
226
|
+
},
|
|
227
|
+
{
|
|
228
|
+
"id": "AML.T0016.003",
|
|
229
|
+
"name": "Exploits",
|
|
230
|
+
"parent": "AML.T0016"
|
|
231
|
+
},
|
|
232
|
+
{
|
|
233
|
+
"id": "AML.T0016.004",
|
|
234
|
+
"name": "AI Agent Tools",
|
|
235
|
+
"parent": "AML.T0016"
|
|
236
|
+
},
|
|
237
|
+
{
|
|
238
|
+
"id": "AML.T0017",
|
|
239
|
+
"name": "Develop Capabilities",
|
|
240
|
+
"parent": null
|
|
241
|
+
},
|
|
242
|
+
{
|
|
243
|
+
"id": "AML.T0017.000",
|
|
244
|
+
"name": "Adversarial AI Attacks",
|
|
245
|
+
"parent": "AML.T0017"
|
|
246
|
+
},
|
|
247
|
+
{
|
|
248
|
+
"id": "AML.T0017.001",
|
|
249
|
+
"name": "Autonomous Exploit Development",
|
|
250
|
+
"parent": "AML.T0017"
|
|
251
|
+
},
|
|
252
|
+
{
|
|
253
|
+
"id": "AML.T0017.002",
|
|
254
|
+
"name": "AI Agent Tools",
|
|
255
|
+
"parent": "AML.T0017"
|
|
256
|
+
},
|
|
257
|
+
{
|
|
258
|
+
"id": "AML.T0018",
|
|
259
|
+
"name": "Manipulate AI Model",
|
|
260
|
+
"parent": null
|
|
261
|
+
},
|
|
262
|
+
{
|
|
263
|
+
"id": "AML.T0018.000",
|
|
264
|
+
"name": "Poison AI Model",
|
|
265
|
+
"parent": "AML.T0018"
|
|
266
|
+
},
|
|
267
|
+
{
|
|
268
|
+
"id": "AML.T0018.001",
|
|
269
|
+
"name": "Modify AI Model Architecture",
|
|
270
|
+
"parent": "AML.T0018"
|
|
271
|
+
},
|
|
272
|
+
{
|
|
273
|
+
"id": "AML.T0018.002",
|
|
274
|
+
"name": "Embed Malware",
|
|
275
|
+
"parent": "AML.T0018"
|
|
276
|
+
},
|
|
277
|
+
{
|
|
278
|
+
"id": "AML.T0018.003",
|
|
279
|
+
"name": "Modify Prompt Construction Logic",
|
|
280
|
+
"parent": "AML.T0018"
|
|
281
|
+
},
|
|
282
|
+
{
|
|
283
|
+
"id": "AML.T0020",
|
|
284
|
+
"name": "Training Data Poisoning",
|
|
285
|
+
"parent": null
|
|
286
|
+
},
|
|
287
|
+
{
|
|
288
|
+
"id": "AML.T0021",
|
|
289
|
+
"name": "Establish Accounts",
|
|
290
|
+
"parent": null
|
|
291
|
+
},
|
|
292
|
+
{
|
|
293
|
+
"id": "AML.T0024",
|
|
294
|
+
"name": "Exfiltration via AI Inference API",
|
|
295
|
+
"parent": null
|
|
296
|
+
},
|
|
297
|
+
{
|
|
298
|
+
"id": "AML.T0024.000",
|
|
299
|
+
"name": "Infer Training Data Membership",
|
|
300
|
+
"parent": "AML.T0024"
|
|
301
|
+
},
|
|
302
|
+
{
|
|
303
|
+
"id": "AML.T0024.001",
|
|
304
|
+
"name": "Invert AI Model",
|
|
305
|
+
"parent": "AML.T0024"
|
|
306
|
+
},
|
|
307
|
+
{
|
|
308
|
+
"id": "AML.T0024.002",
|
|
309
|
+
"name": "Extract AI Model",
|
|
310
|
+
"parent": "AML.T0024"
|
|
311
|
+
},
|
|
312
|
+
{
|
|
313
|
+
"id": "AML.T0025",
|
|
314
|
+
"name": "Exfiltration via Cyber Means",
|
|
315
|
+
"parent": null
|
|
316
|
+
},
|
|
317
|
+
{
|
|
318
|
+
"id": "AML.T0029",
|
|
319
|
+
"name": "Denial of AI Service",
|
|
320
|
+
"parent": null
|
|
321
|
+
},
|
|
322
|
+
{
|
|
323
|
+
"id": "AML.T0031",
|
|
324
|
+
"name": "Erode AI Model Integrity",
|
|
325
|
+
"parent": null
|
|
326
|
+
},
|
|
327
|
+
{
|
|
328
|
+
"id": "AML.T0034",
|
|
329
|
+
"name": "Cost Harvesting",
|
|
330
|
+
"parent": null
|
|
331
|
+
},
|
|
332
|
+
{
|
|
333
|
+
"id": "AML.T0034.000",
|
|
334
|
+
"name": "Excessive Queries",
|
|
335
|
+
"parent": "AML.T0034"
|
|
336
|
+
},
|
|
337
|
+
{
|
|
338
|
+
"id": "AML.T0034.001",
|
|
339
|
+
"name": "Resource-Intensive Queries",
|
|
340
|
+
"parent": "AML.T0034"
|
|
341
|
+
},
|
|
342
|
+
{
|
|
343
|
+
"id": "AML.T0034.002",
|
|
344
|
+
"name": "Agentic Resource Consumption",
|
|
345
|
+
"parent": "AML.T0034"
|
|
346
|
+
},
|
|
347
|
+
{
|
|
348
|
+
"id": "AML.T0035",
|
|
349
|
+
"name": "AI Artifact Collection",
|
|
350
|
+
"parent": null
|
|
351
|
+
},
|
|
352
|
+
{
|
|
353
|
+
"id": "AML.T0036",
|
|
354
|
+
"name": "Data from Information Repositories",
|
|
355
|
+
"parent": null
|
|
356
|
+
},
|
|
357
|
+
{
|
|
358
|
+
"id": "AML.T0037",
|
|
359
|
+
"name": "Data from Local System",
|
|
360
|
+
"parent": null
|
|
361
|
+
},
|
|
362
|
+
{
|
|
363
|
+
"id": "AML.T0040",
|
|
364
|
+
"name": "AI Model Inference API Access",
|
|
365
|
+
"parent": null
|
|
366
|
+
},
|
|
367
|
+
{
|
|
368
|
+
"id": "AML.T0041",
|
|
369
|
+
"name": "Physical Environment Access",
|
|
370
|
+
"parent": null
|
|
371
|
+
},
|
|
372
|
+
{
|
|
373
|
+
"id": "AML.T0042",
|
|
374
|
+
"name": "Verify Attack",
|
|
375
|
+
"parent": null
|
|
376
|
+
},
|
|
377
|
+
{
|
|
378
|
+
"id": "AML.T0043",
|
|
379
|
+
"name": "Craft Adversarial Data",
|
|
380
|
+
"parent": null
|
|
381
|
+
},
|
|
382
|
+
{
|
|
383
|
+
"id": "AML.T0043.000",
|
|
384
|
+
"name": "White-Box Optimization",
|
|
385
|
+
"parent": "AML.T0043"
|
|
386
|
+
},
|
|
387
|
+
{
|
|
388
|
+
"id": "AML.T0043.001",
|
|
389
|
+
"name": "Black-Box Optimization",
|
|
390
|
+
"parent": "AML.T0043"
|
|
391
|
+
},
|
|
392
|
+
{
|
|
393
|
+
"id": "AML.T0043.002",
|
|
394
|
+
"name": "Black-Box Transfer",
|
|
395
|
+
"parent": "AML.T0043"
|
|
396
|
+
},
|
|
397
|
+
{
|
|
398
|
+
"id": "AML.T0043.003",
|
|
399
|
+
"name": "Manual Modification",
|
|
400
|
+
"parent": "AML.T0043"
|
|
401
|
+
},
|
|
402
|
+
{
|
|
403
|
+
"id": "AML.T0043.004",
|
|
404
|
+
"name": "Insert Backdoor Trigger",
|
|
405
|
+
"parent": "AML.T0043"
|
|
406
|
+
},
|
|
407
|
+
{
|
|
408
|
+
"id": "AML.T0044",
|
|
409
|
+
"name": "Full AI Model Access",
|
|
410
|
+
"parent": null
|
|
411
|
+
},
|
|
412
|
+
{
|
|
413
|
+
"id": "AML.T0046",
|
|
414
|
+
"name": "Spamming AI System with Chaff Data",
|
|
415
|
+
"parent": null
|
|
416
|
+
},
|
|
417
|
+
{
|
|
418
|
+
"id": "AML.T0047",
|
|
419
|
+
"name": "AI-Enabled Product or Service",
|
|
420
|
+
"parent": null
|
|
421
|
+
},
|
|
422
|
+
{
|
|
423
|
+
"id": "AML.T0048",
|
|
424
|
+
"name": "External Harms",
|
|
425
|
+
"parent": null
|
|
426
|
+
},
|
|
427
|
+
{
|
|
428
|
+
"id": "AML.T0048.000",
|
|
429
|
+
"name": "Financial Harm",
|
|
430
|
+
"parent": "AML.T0048"
|
|
431
|
+
},
|
|
432
|
+
{
|
|
433
|
+
"id": "AML.T0048.001",
|
|
434
|
+
"name": "Reputational Harm",
|
|
435
|
+
"parent": "AML.T0048"
|
|
436
|
+
},
|
|
437
|
+
{
|
|
438
|
+
"id": "AML.T0048.002",
|
|
439
|
+
"name": "Societal Harm",
|
|
440
|
+
"parent": "AML.T0048"
|
|
441
|
+
},
|
|
442
|
+
{
|
|
443
|
+
"id": "AML.T0048.003",
|
|
444
|
+
"name": "User Harm",
|
|
445
|
+
"parent": "AML.T0048"
|
|
446
|
+
},
|
|
447
|
+
{
|
|
448
|
+
"id": "AML.T0048.004",
|
|
449
|
+
"name": "AI Intellectual Property Theft",
|
|
450
|
+
"parent": "AML.T0048"
|
|
451
|
+
},
|
|
452
|
+
{
|
|
453
|
+
"id": "AML.T0049",
|
|
454
|
+
"name": "Exploit Public-Facing Application",
|
|
455
|
+
"parent": null
|
|
456
|
+
},
|
|
457
|
+
{
|
|
458
|
+
"id": "AML.T0050",
|
|
459
|
+
"name": "Command and Scripting Interpreter",
|
|
460
|
+
"parent": null
|
|
461
|
+
},
|
|
462
|
+
{
|
|
463
|
+
"id": "AML.T0051",
|
|
464
|
+
"name": "LLM Prompt Injection",
|
|
465
|
+
"parent": null
|
|
466
|
+
},
|
|
467
|
+
{
|
|
468
|
+
"id": "AML.T0051.000",
|
|
469
|
+
"name": "Direct",
|
|
470
|
+
"parent": "AML.T0051"
|
|
471
|
+
},
|
|
472
|
+
{
|
|
473
|
+
"id": "AML.T0051.001",
|
|
474
|
+
"name": "Indirect",
|
|
475
|
+
"parent": "AML.T0051"
|
|
476
|
+
},
|
|
477
|
+
{
|
|
478
|
+
"id": "AML.T0051.002",
|
|
479
|
+
"name": "Triggered",
|
|
480
|
+
"parent": "AML.T0051"
|
|
481
|
+
},
|
|
482
|
+
{
|
|
483
|
+
"id": "AML.T0052",
|
|
484
|
+
"name": "Phishing",
|
|
485
|
+
"parent": null
|
|
486
|
+
},
|
|
487
|
+
{
|
|
488
|
+
"id": "AML.T0052.000",
|
|
489
|
+
"name": "Spearphishing via Social Engineering LLM",
|
|
490
|
+
"parent": "AML.T0052"
|
|
491
|
+
},
|
|
492
|
+
{
|
|
493
|
+
"id": "AML.T0052.001",
|
|
494
|
+
"name": "Deepfake-Assisted Phishing",
|
|
495
|
+
"parent": "AML.T0052"
|
|
496
|
+
},
|
|
497
|
+
{
|
|
498
|
+
"id": "AML.T0053",
|
|
499
|
+
"name": "AI Agent Tool Invocation",
|
|
500
|
+
"parent": null
|
|
501
|
+
},
|
|
502
|
+
{
|
|
503
|
+
"id": "AML.T0054",
|
|
504
|
+
"name": "LLM Jailbreak",
|
|
505
|
+
"parent": null
|
|
506
|
+
},
|
|
507
|
+
{
|
|
508
|
+
"id": "AML.T0055",
|
|
509
|
+
"name": "Unsecured Credentials",
|
|
510
|
+
"parent": null
|
|
511
|
+
},
|
|
512
|
+
{
|
|
513
|
+
"id": "AML.T0056",
|
|
514
|
+
"name": "Extract LLM System Prompt",
|
|
515
|
+
"parent": null
|
|
516
|
+
},
|
|
517
|
+
{
|
|
518
|
+
"id": "AML.T0057",
|
|
519
|
+
"name": "LLM Data Leakage",
|
|
520
|
+
"parent": null
|
|
521
|
+
},
|
|
522
|
+
{
|
|
523
|
+
"id": "AML.T0059",
|
|
524
|
+
"name": "Erode Dataset Integrity",
|
|
525
|
+
"parent": null
|
|
526
|
+
},
|
|
527
|
+
{
|
|
528
|
+
"id": "AML.T0060",
|
|
529
|
+
"name": "Publish Hallucinated Entities",
|
|
530
|
+
"parent": null
|
|
531
|
+
},
|
|
532
|
+
{
|
|
533
|
+
"id": "AML.T0061",
|
|
534
|
+
"name": "LLM Prompt Self-Replication",
|
|
535
|
+
"parent": null
|
|
536
|
+
},
|
|
537
|
+
{
|
|
538
|
+
"id": "AML.T0062",
|
|
539
|
+
"name": "Discover LLM Hallucinations",
|
|
540
|
+
"parent": null
|
|
541
|
+
},
|
|
542
|
+
{
|
|
543
|
+
"id": "AML.T0063",
|
|
544
|
+
"name": "Discover AI Model Outputs",
|
|
545
|
+
"parent": null
|
|
546
|
+
},
|
|
547
|
+
{
|
|
548
|
+
"id": "AML.T0064",
|
|
549
|
+
"name": "Gather RAG-Indexed Targets",
|
|
550
|
+
"parent": null
|
|
551
|
+
},
|
|
552
|
+
{
|
|
553
|
+
"id": "AML.T0065",
|
|
554
|
+
"name": "LLM Prompt Crafting",
|
|
555
|
+
"parent": null
|
|
556
|
+
},
|
|
557
|
+
{
|
|
558
|
+
"id": "AML.T0066",
|
|
559
|
+
"name": "Retrieval Content Crafting",
|
|
560
|
+
"parent": null
|
|
561
|
+
},
|
|
562
|
+
{
|
|
563
|
+
"id": "AML.T0067",
|
|
564
|
+
"name": "LLM Trusted Output Components Manipulation",
|
|
565
|
+
"parent": null
|
|
566
|
+
},
|
|
567
|
+
{
|
|
568
|
+
"id": "AML.T0067.000",
|
|
569
|
+
"name": "Citations",
|
|
570
|
+
"parent": "AML.T0067"
|
|
571
|
+
},
|
|
572
|
+
{
|
|
573
|
+
"id": "AML.T0068",
|
|
574
|
+
"name": "LLM Prompt Obfuscation",
|
|
575
|
+
"parent": null
|
|
576
|
+
},
|
|
577
|
+
{
|
|
578
|
+
"id": "AML.T0069",
|
|
579
|
+
"name": "Discover LLM System Information",
|
|
580
|
+
"parent": null
|
|
581
|
+
},
|
|
582
|
+
{
|
|
583
|
+
"id": "AML.T0069.000",
|
|
584
|
+
"name": "Special Character Sets",
|
|
585
|
+
"parent": "AML.T0069"
|
|
586
|
+
},
|
|
587
|
+
{
|
|
588
|
+
"id": "AML.T0069.001",
|
|
589
|
+
"name": "System Instruction Keywords",
|
|
590
|
+
"parent": "AML.T0069"
|
|
591
|
+
},
|
|
592
|
+
{
|
|
593
|
+
"id": "AML.T0069.002",
|
|
594
|
+
"name": "System Prompt",
|
|
595
|
+
"parent": "AML.T0069"
|
|
596
|
+
},
|
|
597
|
+
{
|
|
598
|
+
"id": "AML.T0070",
|
|
599
|
+
"name": "RAG Poisoning",
|
|
600
|
+
"parent": null
|
|
601
|
+
},
|
|
602
|
+
{
|
|
603
|
+
"id": "AML.T0071",
|
|
604
|
+
"name": "False RAG Entry Injection",
|
|
605
|
+
"parent": null
|
|
606
|
+
},
|
|
607
|
+
{
|
|
608
|
+
"id": "AML.T0072",
|
|
609
|
+
"name": "Cyber Communication Channel",
|
|
610
|
+
"parent": null
|
|
611
|
+
},
|
|
612
|
+
{
|
|
613
|
+
"id": "AML.T0073",
|
|
614
|
+
"name": "Impersonation",
|
|
615
|
+
"parent": null
|
|
616
|
+
},
|
|
617
|
+
{
|
|
618
|
+
"id": "AML.T0074",
|
|
619
|
+
"name": "Masquerading",
|
|
620
|
+
"parent": null
|
|
621
|
+
},
|
|
622
|
+
{
|
|
623
|
+
"id": "AML.T0075",
|
|
624
|
+
"name": "Enterprise Resource Discovery",
|
|
625
|
+
"parent": null
|
|
626
|
+
},
|
|
627
|
+
{
|
|
628
|
+
"id": "AML.T0076",
|
|
629
|
+
"name": "Corrupt AI Model",
|
|
630
|
+
"parent": null
|
|
631
|
+
},
|
|
632
|
+
{
|
|
633
|
+
"id": "AML.T0077",
|
|
634
|
+
"name": "LLM Response Rendering",
|
|
635
|
+
"parent": null
|
|
636
|
+
},
|
|
637
|
+
{
|
|
638
|
+
"id": "AML.T0078",
|
|
639
|
+
"name": "Drive-by Compromise",
|
|
640
|
+
"parent": null
|
|
641
|
+
},
|
|
642
|
+
{
|
|
643
|
+
"id": "AML.T0079",
|
|
644
|
+
"name": "Stage Capabilities",
|
|
645
|
+
"parent": null
|
|
646
|
+
},
|
|
647
|
+
{
|
|
648
|
+
"id": "AML.T0080",
|
|
649
|
+
"name": "AI Agent Context Poisoning",
|
|
650
|
+
"parent": null
|
|
651
|
+
},
|
|
652
|
+
{
|
|
653
|
+
"id": "AML.T0080.000",
|
|
654
|
+
"name": "Memory",
|
|
655
|
+
"parent": "AML.T0080"
|
|
656
|
+
},
|
|
657
|
+
{
|
|
658
|
+
"id": "AML.T0080.001",
|
|
659
|
+
"name": "Thread",
|
|
660
|
+
"parent": "AML.T0080"
|
|
661
|
+
},
|
|
662
|
+
{
|
|
663
|
+
"id": "AML.T0081",
|
|
664
|
+
"name": "Modify AI Agent Configuration",
|
|
665
|
+
"parent": null
|
|
666
|
+
},
|
|
667
|
+
{
|
|
668
|
+
"id": "AML.T0082",
|
|
669
|
+
"name": "RAG Credential Harvesting",
|
|
670
|
+
"parent": null
|
|
671
|
+
},
|
|
672
|
+
{
|
|
673
|
+
"id": "AML.T0083",
|
|
674
|
+
"name": "Credentials from AI Agent Configuration",
|
|
675
|
+
"parent": null
|
|
676
|
+
},
|
|
677
|
+
{
|
|
678
|
+
"id": "AML.T0084",
|
|
679
|
+
"name": "Discover AI Agent Configuration",
|
|
680
|
+
"parent": null
|
|
681
|
+
},
|
|
682
|
+
{
|
|
683
|
+
"id": "AML.T0084.000",
|
|
684
|
+
"name": "Embedded Knowledge",
|
|
685
|
+
"parent": "AML.T0084"
|
|
686
|
+
},
|
|
687
|
+
{
|
|
688
|
+
"id": "AML.T0084.001",
|
|
689
|
+
"name": "Tool Definitions",
|
|
690
|
+
"parent": "AML.T0084"
|
|
691
|
+
},
|
|
692
|
+
{
|
|
693
|
+
"id": "AML.T0084.002",
|
|
694
|
+
"name": "Activation Triggers",
|
|
695
|
+
"parent": "AML.T0084"
|
|
696
|
+
},
|
|
697
|
+
{
|
|
698
|
+
"id": "AML.T0084.003",
|
|
699
|
+
"name": "Call Chains",
|
|
700
|
+
"parent": "AML.T0084"
|
|
701
|
+
},
|
|
702
|
+
{
|
|
703
|
+
"id": "AML.T0085",
|
|
704
|
+
"name": "Data from AI Services",
|
|
705
|
+
"parent": null
|
|
706
|
+
},
|
|
707
|
+
{
|
|
708
|
+
"id": "AML.T0085.000",
|
|
709
|
+
"name": "RAG Databases",
|
|
710
|
+
"parent": "AML.T0085"
|
|
711
|
+
},
|
|
712
|
+
{
|
|
713
|
+
"id": "AML.T0085.001",
|
|
714
|
+
"name": "AI Agent Tools",
|
|
715
|
+
"parent": "AML.T0085"
|
|
716
|
+
},
|
|
717
|
+
{
|
|
718
|
+
"id": "AML.T0086",
|
|
719
|
+
"name": "Exfiltration via AI Agent Tool Invocation",
|
|
720
|
+
"parent": null
|
|
721
|
+
},
|
|
722
|
+
{
|
|
723
|
+
"id": "AML.T0087",
|
|
724
|
+
"name": "Gather Victim Identity Information",
|
|
725
|
+
"parent": null
|
|
726
|
+
},
|
|
727
|
+
{
|
|
728
|
+
"id": "AML.T0088",
|
|
729
|
+
"name": "Generate Deepfakes",
|
|
730
|
+
"parent": null
|
|
731
|
+
},
|
|
732
|
+
{
|
|
733
|
+
"id": "AML.T0089",
|
|
734
|
+
"name": "Enterprise Environment Discovery",
|
|
735
|
+
"parent": null
|
|
736
|
+
},
|
|
737
|
+
{
|
|
738
|
+
"id": "AML.T0090",
|
|
739
|
+
"name": "OS Credential Dumping",
|
|
740
|
+
"parent": null
|
|
741
|
+
},
|
|
742
|
+
{
|
|
743
|
+
"id": "AML.T0091",
|
|
744
|
+
"name": "Use Alternate Authentication Material",
|
|
745
|
+
"parent": null
|
|
746
|
+
},
|
|
747
|
+
{
|
|
748
|
+
"id": "AML.T0091.000",
|
|
749
|
+
"name": "Application Access Token",
|
|
750
|
+
"parent": "AML.T0091"
|
|
751
|
+
},
|
|
752
|
+
{
|
|
753
|
+
"id": "AML.T0091.001",
|
|
754
|
+
"name": "Web Session Cookie",
|
|
755
|
+
"parent": "AML.T0091"
|
|
756
|
+
},
|
|
757
|
+
{
|
|
758
|
+
"id": "AML.T0092",
|
|
759
|
+
"name": "Manipulate User LLM Chat History",
|
|
760
|
+
"parent": null
|
|
761
|
+
},
|
|
762
|
+
{
|
|
763
|
+
"id": "AML.T0093",
|
|
764
|
+
"name": "Prompt Infiltration via Public-Facing Application",
|
|
765
|
+
"parent": null
|
|
766
|
+
},
|
|
767
|
+
{
|
|
768
|
+
"id": "AML.T0094",
|
|
769
|
+
"name": "Delay Execution of LLM Instructions",
|
|
770
|
+
"parent": null
|
|
771
|
+
},
|
|
772
|
+
{
|
|
773
|
+
"id": "AML.T0095",
|
|
774
|
+
"name": "Search Open Websites/Domains",
|
|
775
|
+
"parent": null
|
|
776
|
+
},
|
|
777
|
+
{
|
|
778
|
+
"id": "AML.T0095.000",
|
|
779
|
+
"name": "Code Repositories",
|
|
780
|
+
"parent": "AML.T0095"
|
|
781
|
+
},
|
|
782
|
+
{
|
|
783
|
+
"id": "AML.T0096",
|
|
784
|
+
"name": "AI Service API",
|
|
785
|
+
"parent": null
|
|
786
|
+
},
|
|
787
|
+
{
|
|
788
|
+
"id": "AML.T0097",
|
|
789
|
+
"name": "Virtualization/Sandbox Evasion",
|
|
790
|
+
"parent": null
|
|
791
|
+
},
|
|
792
|
+
{
|
|
793
|
+
"id": "AML.T0098",
|
|
794
|
+
"name": "AI Agent Tool Credential Harvesting",
|
|
795
|
+
"parent": null
|
|
796
|
+
},
|
|
797
|
+
{
|
|
798
|
+
"id": "AML.T0099",
|
|
799
|
+
"name": "AI Agent Tool Data Poisoning",
|
|
800
|
+
"parent": null
|
|
801
|
+
},
|
|
802
|
+
{
|
|
803
|
+
"id": "AML.T0100",
|
|
804
|
+
"name": "AI Agent Clickbait",
|
|
805
|
+
"parent": null
|
|
806
|
+
},
|
|
807
|
+
{
|
|
808
|
+
"id": "AML.T0101",
|
|
809
|
+
"name": "Data Destruction via AI Agent Tool Invocation",
|
|
810
|
+
"parent": null
|
|
811
|
+
},
|
|
812
|
+
{
|
|
813
|
+
"id": "AML.T0102",
|
|
814
|
+
"name": "Generate Malicious Commands",
|
|
815
|
+
"parent": null
|
|
816
|
+
},
|
|
817
|
+
{
|
|
818
|
+
"id": "AML.T0103",
|
|
819
|
+
"name": "Deploy AI Agent",
|
|
820
|
+
"parent": null
|
|
821
|
+
},
|
|
822
|
+
{
|
|
823
|
+
"id": "AML.T0105",
|
|
824
|
+
"name": "Escape to Host",
|
|
825
|
+
"parent": null
|
|
826
|
+
},
|
|
827
|
+
{
|
|
828
|
+
"id": "AML.T0106",
|
|
829
|
+
"name": "Exploitation for Credential Access",
|
|
830
|
+
"parent": null
|
|
831
|
+
},
|
|
832
|
+
{
|
|
833
|
+
"id": "AML.T0107",
|
|
834
|
+
"name": "Exploitation for Defense Evasion",
|
|
835
|
+
"parent": null
|
|
836
|
+
},
|
|
837
|
+
{
|
|
838
|
+
"id": "AML.T0108",
|
|
839
|
+
"name": "AI Agent",
|
|
840
|
+
"parent": null
|
|
841
|
+
},
|
|
842
|
+
{
|
|
843
|
+
"id": "AML.T0109",
|
|
844
|
+
"name": "AI Supply Chain Rug Pull",
|
|
845
|
+
"parent": null
|
|
846
|
+
},
|
|
847
|
+
{
|
|
848
|
+
"id": "AML.T0110",
|
|
849
|
+
"name": "AI Agent Tool Poisoning",
|
|
850
|
+
"parent": null
|
|
851
|
+
},
|
|
852
|
+
{
|
|
853
|
+
"id": "AML.T0110.000",
|
|
854
|
+
"name": "Definition and Instructions",
|
|
855
|
+
"parent": "AML.T0110"
|
|
856
|
+
},
|
|
857
|
+
{
|
|
858
|
+
"id": "AML.T0110.001",
|
|
859
|
+
"name": "Implementation",
|
|
860
|
+
"parent": "AML.T0110"
|
|
861
|
+
},
|
|
862
|
+
{
|
|
863
|
+
"id": "AML.T0110.002",
|
|
864
|
+
"name": "Runtime Response",
|
|
865
|
+
"parent": "AML.T0110"
|
|
866
|
+
},
|
|
867
|
+
{
|
|
868
|
+
"id": "AML.T0111",
|
|
869
|
+
"name": "AI Supply Chain Reputation Inflation",
|
|
870
|
+
"parent": null
|
|
871
|
+
},
|
|
872
|
+
{
|
|
873
|
+
"id": "AML.T0112",
|
|
874
|
+
"name": "Machine Compromise",
|
|
875
|
+
"parent": null
|
|
876
|
+
},
|
|
877
|
+
{
|
|
878
|
+
"id": "AML.T0112.000",
|
|
879
|
+
"name": "Local AI Agent",
|
|
880
|
+
"parent": "AML.T0112"
|
|
881
|
+
},
|
|
882
|
+
{
|
|
883
|
+
"id": "AML.T0112.001",
|
|
884
|
+
"name": "AI Artifacts",
|
|
885
|
+
"parent": "AML.T0112"
|
|
886
|
+
},
|
|
887
|
+
{
|
|
888
|
+
"id": "AML.T0113",
|
|
889
|
+
"name": "Steal Web Session Cookie",
|
|
890
|
+
"parent": null
|
|
891
|
+
},
|
|
892
|
+
{
|
|
893
|
+
"id": "AML.T0114",
|
|
894
|
+
"name": "AI Service Web Interface",
|
|
895
|
+
"parent": null
|
|
896
|
+
},
|
|
897
|
+
{
|
|
898
|
+
"id": "AML.T0115",
|
|
899
|
+
"name": "Publish Poisoned AI Artifacts",
|
|
900
|
+
"parent": null
|
|
901
|
+
},
|
|
902
|
+
{
|
|
903
|
+
"id": "AML.T0115.000",
|
|
904
|
+
"name": "Datasets",
|
|
905
|
+
"parent": "AML.T0115"
|
|
906
|
+
},
|
|
907
|
+
{
|
|
908
|
+
"id": "AML.T0115.001",
|
|
909
|
+
"name": "Models",
|
|
910
|
+
"parent": "AML.T0115"
|
|
911
|
+
},
|
|
912
|
+
{
|
|
913
|
+
"id": "AML.T0115.002",
|
|
914
|
+
"name": "AI Agent Tools",
|
|
915
|
+
"parent": "AML.T0115"
|
|
916
|
+
},
|
|
917
|
+
{
|
|
918
|
+
"id": "AML.T0116",
|
|
919
|
+
"name": "Autonomous Reconnaissance",
|
|
920
|
+
"parent": null
|
|
921
|
+
},
|
|
922
|
+
{
|
|
923
|
+
"id": "AML.T0117",
|
|
924
|
+
"name": "Autonomous Attack-Path Adaptation",
|
|
925
|
+
"parent": null
|
|
926
|
+
},
|
|
927
|
+
{
|
|
928
|
+
"id": "AML.T0118",
|
|
929
|
+
"name": "Autonomous AI Agent Communication",
|
|
930
|
+
"parent": null
|
|
931
|
+
},
|
|
932
|
+
{
|
|
933
|
+
"id": "AML.T0118.000",
|
|
934
|
+
"name": "Communication via Shared Artifacts",
|
|
935
|
+
"parent": "AML.T0118"
|
|
936
|
+
},
|
|
937
|
+
{
|
|
938
|
+
"id": "AML.T0118.001",
|
|
939
|
+
"name": "Direct Agent Communication",
|
|
940
|
+
"parent": "AML.T0118"
|
|
941
|
+
},
|
|
942
|
+
{
|
|
943
|
+
"id": "AML.T0119",
|
|
944
|
+
"name": "Exploit Automated Artifact Processing Pipeline",
|
|
945
|
+
"parent": null
|
|
946
|
+
},
|
|
947
|
+
{
|
|
948
|
+
"id": "AML.T0120",
|
|
949
|
+
"name": "AI Artifact Repository",
|
|
950
|
+
"parent": null
|
|
951
|
+
},
|
|
952
|
+
{
|
|
953
|
+
"id": "AML.T0121",
|
|
954
|
+
"name": "AI Agent Environment Reconstruction",
|
|
955
|
+
"parent": null
|
|
956
|
+
},
|
|
957
|
+
{
|
|
958
|
+
"id": "AML.T0122",
|
|
959
|
+
"name": "Exploitation of Remote Services",
|
|
960
|
+
"parent": null
|
|
961
|
+
},
|
|
962
|
+
{
|
|
963
|
+
"id": "AML.T0123",
|
|
964
|
+
"name": "Obfuscated Files or Information",
|
|
965
|
+
"parent": null
|
|
966
|
+
},
|
|
967
|
+
{
|
|
968
|
+
"id": "AML.T0124",
|
|
969
|
+
"name": "Autonomous Attack Orchestration",
|
|
970
|
+
"parent": null
|
|
971
|
+
},
|
|
972
|
+
{
|
|
973
|
+
"id": "AML.T0125",
|
|
974
|
+
"name": "Create Account",
|
|
975
|
+
"parent": null
|
|
976
|
+
},
|
|
977
|
+
{
|
|
978
|
+
"id": "AML.T0126",
|
|
979
|
+
"name": "Automated Collection",
|
|
980
|
+
"parent": null
|
|
981
|
+
},
|
|
982
|
+
{
|
|
983
|
+
"id": "AML.T0127",
|
|
984
|
+
"name": "Data Staged",
|
|
985
|
+
"parent": null
|
|
986
|
+
},
|
|
987
|
+
{
|
|
988
|
+
"id": "AML.T0128",
|
|
989
|
+
"name": "Compromise Infrastructure",
|
|
990
|
+
"parent": null
|
|
991
|
+
}
|
|
992
|
+
]
|
|
993
|
+
}
|