H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Technique

Query System for Information

An adversary, aware of an application's location (and possibly authorized to use the application), probes an application's structure and evaluates its robustness by submitting requests and examining responses. Often, this is accomplished by sending variants of expected queries in the hope that these modified queries might return information beyond what the expected set of queries would provide.

Technique
TypeTechnique
External ID—
First seen2026-10-17
Last seen2026-10-17

Confidence

—

An adversary, aware of an application's location (and possibly authorized to use the application), probes an application's structure and evaluates its robustness by submitting requests and examining responses. Often, this is accomplished by sending variants of expected queries in the hope that these modified queries might return information beyond what the expected set of queries would provide.

Labels

attack-patterncapec
8 recorded

Relationships

child-of
from Cross-Domain Search Timing
Technique
child-of
from Directory Indexing
Technique
child-of
from Fuzzing for application mapping
Technique
child-of
from Fuzzing for garnering other adjacent user/sensitive data
Technique
child-of
to Excavation
Technique
child-of
from WSDL Scanning
Technique
related-to
from CVE-2024-29059
Vulnerability
related-to
from CVE-2025-47813
Vulnerability
1 external

References

capec
CAPEC-54
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance