H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Technique

Functionality Misuse

An adversary leverages a legitimate capability of an application in such a way as to achieve a negative technical impact. The system functionality is not altered or modified but used in a way that was not intended. This is often accomplished through the overuse of a specific functionality or by leveraging functionality with design flaws that enables the adversary to gain access to unauthorized, sensitive data.

Technique
TypeTechnique
External ID—
First seen2026-10-17
Last seen2026-10-17

Confidence

—

An adversary leverages a legitimate capability of an application in such a way as to achieve a negative technical impact. The system functionality is not altered or modified but used in a way that was not intended. This is often accomplished through the overuse of a specific functionality or by leveraging functionality with design flaws that enables the adversary to gain access to unauthorized, sensitive data.

Labels

attack-patterncapec
6 recorded

Relationships

child-of
from Drop Encryption Level
Technique
child-of
from Exploitation of Firmware or ROM Code with Unpatchable Vulnerabilities
Technique
child-of
from Inducing Account Lockout
Technique
child-of
from JSON Hijacking (aka JavaScript Hijacking)
Technique
child-of
from Passing Local Filenames to Functions That Expect a URL
Technique
child-of
from Password Recovery Exploitation
Technique
1 external

References

capec
CAPEC-212
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance