RPC interface attack techniques
46 techniques · family network-rpc
Coarse classes for techniques catalogued from public disclosure but not yet reproduced.
NRDAX-T0008 - Authorization Check Bypass RCE active NRDAX-T0009 - Bit-Length Validation Panic active NRDAX-T0029 - Concurrent RPC Race Nil-Deref Panic active NRDAX-T0035 - Contract Activation Compute Exhaustion active NRDAX-T0036 - Contract Execution Engine Crash active NRDAX-T0045 - Declare Transaction Compilation CPU Exhaustion active NRDAX-T0052 - DNS Rebinding SSRF Bypass active NRDAX-T0054 - DNSSEC Validation Bypass Cache Poisoning active NRDAX-T0058 - Duplicate Record Constraint Crash active NRDAX-T0072 - Event Stream Endpoint Crash DoS active NRDAX-T0096 - GraphQL Nested Query Depth CPU Exhaustion active NRDAX-T0109 - HTTP API Connection Hang DoS active NRDAX-T0110 - HTTP Header Spoofing Trust Bypass active NRDAX-T0119 - Integer Overflow Decompression Infinite Loop active NRDAX-T0134 - JSON Deserialization RCE active NRDAX-T0146 - Malformed HTTP Header Parsing Crash active NRDAX-T0147 - Malformed HTTP/3 Frame Crash active NRDAX-T0162 - Metrics Endpoint Resource Exhaustion active NRDAX-T0169 - Network Reconnaissance Scanning active NRDAX-T0180 - OIDC Identity Verification Bypass active NRDAX-T0190 - Oversized Hex String Parsing CPU Exhaustion active NRDAX-T0197 - Payload Window Overflow Memory Exhaustion active NRDAX-T0210 - Premature Disconnect Request Handling Crash active NRDAX-T0250 - Regex Schema Validation ReDoS active NRDAX-T0258 - RPC Arbitrary File Write active NRDAX-T0259 - RPC Integer Overflow Memory Corruption active NRDAX-T0260 - RPC Parameter Validation Defect active NRDAX-T0262 - RPC Request Memory Leak active NRDAX-T0263 - RPC Serialization Deadlock active NRDAX-T0264 - Scope Permission Bypass Unauthorized Write active NRDAX-T0279 - SOCKS Proxy Remote Code Execution active NRDAX-T0281 - SSH Password Authentication Exposure active NRDAX-T0283 - Stale State Reuse Crash active NRDAX-T0287 - State Simulation Copy Panic active NRDAX-T0302 - TLS Handshake Fragmentation Panic active NRDAX-T0305 - TLS SNI mTLS Bypass active NRDAX-T0308 - Transaction History Storage Exhaustion active NRDAX-T0318 - Unauthenticated RPC Command Execution active NRDAX-T0323 - Unbounded Filter Subscription Storage Exhaustion active NRDAX-T0324 - Unbounded Log Range Scan Amplification active NRDAX-T0330 - Unbounded Signature Verification CPU Exhaustion active NRDAX-T0341 - Unhandled RPC Error Panic active NRDAX-T0358 - URL Path Encoding Auth Bypass active NRDAX-T0375 - XML Attribute Parsing Quadratic CPU Exhaustion active NRDAX-T0376 - XML Namespace Declaration Memory Exhaustion active NRDAX-T0381 - ZMQ Message Error-Handling Crash active