From 8da708c2927f475ac34069fc8b078ee4646af092 Mon Sep 17 00:00:00 2001 From: Shiv Bhagavatula Date: Thu, 25 Apr 2024 15:31:49 +0530 Subject: [PATCH] - Adding the buttons --- tactic-TA0001.html | 75 +++++++++++++---- tactic-TA0002.html | 45 ++++++++--- tactic-TA0003.html | 30 +++++-- tactic-TA0004.html | 20 ++++- tactic-TA0005.html | 100 ++++++++++++++++++----- tactic-TA0006.html | 65 ++++++++++++--- tactic-TA0007.html | 165 ++++++++++++++++++++++++++++++-------- tactic-TA0008.html | 25 ++++-- tactic-TA0009.html | 195 ++++++++++++++++++++++++++++++++++++--------- tactic-TA0010.html | 30 +++++-- tactic-TA0011.html | 20 ++++- tactic-TA0040.html | 150 +++++++++++++++++++++++++++------- tactic-TA0042.html | 65 ++++++++++++--- tactic-TA0043.html | 10 ++- tactic-TA5001.html | 25 ++++-- template.go | 6 +- 16 files changed, 821 insertions(+), 205 deletions(-) diff --git a/tactic-TA0001.html b/tactic-TA0001.html index eb72ba7..69da35b 100644 --- a/tactic-TA0001.html +++ b/tactic-TA0001.html @@ -8,77 +8,122 @@

Tactic:Initial Access MNO Roaming Partners - no + no + 🔴 + + Unauthorized access to Network Exposure Function (NEF) via token fraud - no + no + 🔴 + + Supply Chain Compromise - no + no + 🔴 + + Cloud Accounts - no + no + 🔴 + + SIM Credential Theft - no + no + 🔴 + + Protocol Tunneling - no + no + 🔴 + + Exploit Public-Facing Application - no + no + 🔴 + + Compromise Service Supply Chain - no + no + 🔴 + + Exploit Semi-public Facing Application - no + no + 🔴 + + UE Access via GTP-U - no + no + 🔴 + + Radio control manipulation via rogue xApps - no + no + 🔴 + + Compromise Software Supply Chain - no + no + 🔴 + + Compromise Hardware Supply Chain - no + no + 🔴 + + Trusted Relationship - no + no + 🔴 + + Valid Accounts - no + no + 🔴 + + diff --git a/tactic-TA0002.html b/tactic-TA0002.html index 38412be..a7b7f59 100644 --- a/tactic-TA0002.html +++ b/tactic-TA0002.html @@ -8,47 +8,74 @@

Tactic:Execution

Registration of malicious network functions - no + no + 🔴 + + Software Deployment Tools - no + no + 🔴 + + gNodeB Component Manipulation - no + no + 🔴 + + RAN Intelligent Controller (RIC) - no + no + 🔴 + + xApp - no + no + 🔴 + + rApp - no + no + 🔴 + + Over-the-Air Input - no + no + 🔴 + + Baseband API - no + no + 🔴 + + Exploitation for Client Execution - no + no + 🔴 + + diff --git a/tactic-TA0003.html b/tactic-TA0003.html index ddc137f..593b531 100644 --- a/tactic-TA0003.html +++ b/tactic-TA0003.html @@ -8,32 +8,50 @@

Tactic:Persistence

Implant Internal Image - no + no + 🔴 + + Local Accounts - no + no + 🔴 + + Unauthorized software in NFVI - no + no + 🔴 + + Cloud Accounts - no + no + 🔴 + + Valid Accounts - no + no + 🔴 + + Pre-OS Boot - no + no + 🔴 + + diff --git a/tactic-TA0004.html b/tactic-TA0004.html index ed6016b..15952d5 100644 --- a/tactic-TA0004.html +++ b/tactic-TA0004.html @@ -8,22 +8,34 @@

Tactic:Privilege Escalation Escape to Host - yes + yes + 🟢 + + Cloud Accounts - no + no + 🔴 + + Malicious privileged container VNF Shared Resource Access - no + no + 🔴 + + Valid Accounts - no + no + 🔴 + + diff --git a/tactic-TA0005.html b/tactic-TA0005.html index 366f108..80407b5 100644 --- a/tactic-TA0005.html +++ b/tactic-TA0005.html @@ -8,102 +8,162 @@

Tactic:Defense Evasion< Bypass home routing - no + no + 🔴 + + Bid down UE - no + no + 🔴 + + Manipulate Virtual Network Function (VNF) Configuration - no + no + 🔴 + + Rootkit - no + no + 🔴 + + Unauthorized software in NFVI - no + no + 🔴 + + Radio Interface - no + no + 🔴 + + Cloud Accounts - no + no + 🔴 + + Malicious co-tenancy exploit of NFVI (Network Slice) - no + no + 🔴 + + Network Slice infrastructure resource hijacking - no + no + 🔴 + + Network Boundary Bridging - no + no + 🔴 + + Spoof network slice identifier - no + no + 🔴 + + Weaken Integrity - no + no + 🔴 + + Radio Interface - no + no + 🔴 + + Network Interfaces - no + no + 🔴 + + Network Interfaces - no + no + 🔴 + + GTP-U Abuse - no + no + 🔴 + + Impair Defenses - no + no + 🔴 + + Valid Accounts - no + no + 🔴 + + Pre-OS Boot - no + no + 🔴 + + Weaken Encryption - no + no + 🔴 + + diff --git a/tactic-TA0006.html b/tactic-TA0006.html index 2de1d77..fd8ed5e 100644 --- a/tactic-TA0006.html +++ b/tactic-TA0006.html @@ -8,67 +8,106 @@

Tactic:Credential Access Supply Chain Compromise - no + no + 🔴 + + Accessing Terminated VNF - no + no + 🔴 + + Network Sniffing - no + no + 🔴 + + Hardware Security Module Key Signing - no + no + 🔴 + + Roaming and Interconnection - no + no + 🔴 + + Radio interface - no + no + 🔴 + + SIM cloning - no + no + 🔴 + + Non-SBI - no + no + 🔴 + + Service Based Interface - no + no + 🔴 + + SIM Credential Theft - no + no + 🔴 + + Container Administration Command - no + no + 🔴 + + Credentials from Password Stores - no + no + 🔴 + + Adversary-in-the-Middle - no + no + 🔴 + + diff --git a/tactic-TA0007.html b/tactic-TA0007.html index 5767017..e9a5bfd 100644 --- a/tactic-TA0007.html +++ b/tactic-TA0007.html @@ -8,167 +8,266 @@

Tactic:Discovery

Network Function Service Discovery - no + no + 🔴 + + Network Flow Manipulation - no + no + 🔴 + + Controller - no + no + 🔴 + + vSwitch - no + no + 🔴 + + 5G-GUTI reuse - no + no + 🔴 + + Remote Services - no + no + 🔴 + + Malicious VNF Instantiation - no + no + 🔴 + + Accessing Terminated VNF - no + no + 🔴 + + Shared resource discovery - no + no + 🔴 + + Network Sniffing - no + no + 🔴 + + Traffic Duplication - no + no + 🔴 + + Remote System Discovery - no + no + 🔴 + + Network Service Discovery - no + no + 🔴 + + Core Network Function Signaling - no + no + 🔴 + + Subscriber Profile Identifier Discovery - no + no + 🔴 + + Intercept Home Network via SUCI - no + no + 🔴 + + Intercept bid-down SUPI - no + no + 🔴 + + Passive radio signals observation - no + no + 🔴 + + Self Location Measurement - no + no + 🔴 + + Discover network slice identifier - no + no + 🔴 + + Locate UE - no + no + 🔴 + + Shared Network Function in slice - no + no + 🔴 + + Charging Data Record (CDR) collection - no + no + 🔴 + + NAS Exploit - no + no + 🔴 + + Obtain subscriber identifier via NF - no + no + 🔴 + + Intercept unencrypted SUPI - no + no + 🔴 + + Discover TEID - no + no + 🔴 + + Diameter signaling - no + no + 🔴 + + Diameter signaling - no + no + 🔴 + + Silent SMS - no + no + 🔴 + + Silent or spoofed paging - no + no + 🔴 + + Container Administration Command - no + no + 🔴 + + Automated Exfiltration - no + no + 🔴 + + diff --git a/tactic-TA0008.html b/tactic-TA0008.html index b0a3133..4decf59 100644 --- a/tactic-TA0008.html +++ b/tactic-TA0008.html @@ -8,27 +8,42 @@

Tactic:Lateral Movement Escape to Host - yes + yes + 🟢 + + Unauthorized access to Network Exposure Function (NEF) via token fraud - no + no + 🔴 + + Remote Services - no + no + 🔴 + + Software Deployment Tools - no + no + 🔴 + + Radio control manipulation via rogue xApps - no + no + 🔴 + + diff --git a/tactic-TA0009.html b/tactic-TA0009.html index 507be10..1f7cb80 100644 --- a/tactic-TA0009.html +++ b/tactic-TA0009.html @@ -8,197 +8,314 @@

Tactic:Collection

Network Flow Manipulation - no + no + 🔴 + + Controller - no + no + 🔴 + + vSwitch - no + no + 🔴 + + Memory Scraping - no + no + 🔴 + + Redirection of traffic via user plane network function - no + no + 🔴 + + Fraudulent AMF registration for UE in UDM - no + no + 🔴 + + 5G-GUTI reuse - no + no + 🔴 + + Malicious VNF Instantiation - no + no + 🔴 + + Network Sniffing - no + no + 🔴 + + Abuse of Inter-operator Interfaces - no + no + 🔴 + + Core Network Function Signaling - no + no + 🔴 + + Roaming and Interconnection - no + no + 🔴 + + Subscriber Profile Identifier Discovery - no + no + 🔴 + + Intercept Home Network via SUCI - no + no + 🔴 + + Intercept bid-down SUPI - no + no + 🔴 + + Passive radio signals observation - no + no + 🔴 + + Self Location Measurement - no + no + 🔴 + + Radio interface - no + no + 🔴 + + Radio interface - no + no + 🔴 + + Spoof network slice identifier - no + no + 🔴 + + Non-SBI - no + no + 🔴 + + Transmitted Data Manipulation - no + no + 🔴 + + Locate UE - no + no + 🔴 + + Shared Network Function in slice - no + no + 🔴 + + Service Based Interface - no + no + 🔴 + + Retrieve UE subscription data - no + no + 🔴 + + Network-side SMS collection - no + no + 🔴 + + Charging Data Record (CDR) collection - no + no + 🔴 + + NAS Exploit - no + no + 🔴 + + Obtain subscriber identifier via NF - no + no + 🔴 + + Exploit Public-Facing Application - no + no + 🔴 + + Intercept unencrypted SUPI - no + no + 🔴 + + Exploit Semi-public Facing Application - no + no + 🔴 + + Diameter signaling - no + no + 🔴 + + Diameter signaling - no + no + 🔴 + + Silent SMS - no + no + 🔴 + + Silent or spoofed paging - no + no + 🔴 + + Adversary-in-the-Middle - no + no + 🔴 + + Data Manipulation - no + no + 🔴 + + diff --git a/tactic-TA0010.html b/tactic-TA0010.html index 07939e1..fb92ad3 100644 --- a/tactic-TA0010.html +++ b/tactic-TA0010.html @@ -8,32 +8,50 @@

Tactic:Exfiltration

Traffic Duplication - no + no + 🔴 + + Protocol Tunneling - no + no + 🔴 + + Exfiltration Over Unencrypted Non-C2 Protocol - no + no + 🔴 + + Exfiltration Over Alternative Protocol - no + no + 🔴 + + Covert Exfiltration of Data Via DNS Request - no + no + 🔴 + + Automated Exfiltration - no + no + 🔴 + + diff --git a/tactic-TA0011.html b/tactic-TA0011.html index 458edfa..db54dbc 100644 --- a/tactic-TA0011.html +++ b/tactic-TA0011.html @@ -8,22 +8,34 @@

Tactic:Command and Control< Application Layer Protocol - no + no + 🔴 + + Protocol Tunneling - no + no + 🔴 + + Exfiltration Over Alternative Protocol - no + no + 🔴 + + Covert Exfiltration of Data Via DNS Request - no + no + 🔴 + + diff --git a/tactic-TA0040.html b/tactic-TA0040.html index 270dbd8..035f2bd 100644 --- a/tactic-TA0040.html +++ b/tactic-TA0040.html @@ -8,152 +8,242 @@

Tactic:Impact

MNO Roaming Partners - no + no + 🔴 + + Service Exhaustion Flood - no + no + 🔴 + + Radio Jamming - no + no + 🔴 + + Redirection of traffic via user plane network function - no + no + 🔴 + + Tunnel Endpoint ID (TEID) uniqueness failure - no + no + 🔴 + + Network Slice application resource hijacking - no + no + 🔴 + + Device Database Manipulation - no + no + 🔴 + + Flooding of core network component - no + no + 🔴 + + Vandalism of Network Infrastructure - no + no + 🔴 + + Cabling and junction boxes - no + no + 🔴 + + Radio Access Hardware - no + no + 🔴 + + Edge servers - no + no + 🔴 + + Theft of Assets - no + no + 🔴 + + Consume data allocation to deny or degrade service - no + no + 🔴 + + Trigger fraud alert to deny service - no + no + 🔴 + + Transmitted Data Manipulation - no + no + 🔴 + + DOS a UE via gNB or NF signaling - no + no + 🔴 + + Exploit Public-Facing Application - no + no + 🔴 + + Endpoint Denial of Service - no + no + 🔴 + + Shared slice common control network function resource exhaustion - no + no + 🔴 + + UE DoS to AMF - no + no + 🔴 + + IAB Denial of Service - no + no + 🔴 + + Alter ML Model - no + no + 🔴 + + AI/ML training data and prediction poisoning - no + no + 🔴 + + Hardware Additions - no + no + 🔴 + + Transmit Spoofed Broadcast Message - no + no + 🔴 + + Trusted Relationship - no + no + 🔴 + + Network Denial of Service - no + no + 🔴 + + Data Manipulation - no + no + 🔴 + + Endpoint Denial of Service - no + no + 🔴 + + diff --git a/tactic-TA0042.html b/tactic-TA0042.html index c8c478e..d24ef9d 100644 --- a/tactic-TA0042.html +++ b/tactic-TA0042.html @@ -8,67 +8,106 @@

Tactic:Resource Development False Base Station or Access Point - no + no + 🔴 + + Obtain Capabilities - no + no + 🔴 + + Programable UE devices - no + no + 🔴 + + Configurability of Fake Base Station or Access Point - no + no + 🔴 + + Acquire Infrastructure - no + no + 🔴 + + Exploits - no + no + 🔴 + + Operator Network - no + no + 🔴 + + Network Access - no + no + 🔴 + + Develop Capabilities - no + no + 🔴 + + Stage Capabilities - no + no + 🔴 + + Configure Operator Core Network - no + no + 🔴 + + Tool - no + no + 🔴 + + Radio Network Functions - no + no + 🔴 + + diff --git a/tactic-TA0043.html b/tactic-TA0043.html index 65e0fea..d460a92 100644 --- a/tactic-TA0043.html +++ b/tactic-TA0043.html @@ -8,12 +8,18 @@

Tactic:Reconnaissance Internal resource search - no + no + 🔴 + + Gather Victim Host Information - no + no + 🔴 + + diff --git a/tactic-TA5001.html b/tactic-TA5001.html index 67c7e03..722a240 100644 --- a/tactic-TA5001.html +++ b/tactic-TA5001.html @@ -8,27 +8,42 @@

Tactic:Fraud

Abuse of Inter-operator Interfaces - no + no + 🔴 + + Alter Subscriber Profile - no + no + 🔴 + + Falsify interconnect invoice - no + no + 🔴 + + SIM cloning - no + no + 🔴 + + Charging fraud via NF control - no + no + 🔴 + + diff --git a/template.go b/template.go index 037a689..6d2fb8a 100644 --- a/template.go +++ b/template.go @@ -128,7 +128,11 @@ func (t Tactic) generateTechniquesPerTacticPage(out *os.File) error { {{range .Techniques}} {{.Name}} - {{.Support}} + {{.Support}} + {{if eq .Support "yes"}}🟢 + {{else if eq .Support "no"}}🔴 + {{end}} + {{end}}