{
  "name": "OWASP Top 10:2025 -> MITRE ATT&CK",
  "versions": {
    "attack": "15",
    "navigator": "4.9.1",
    "layer": "4.5"
  },
  "domain": "enterprise-attack",
  "description": "ATT&CK techniques associated with the OWASP Top 10:2025 categories. Score 100 = referenced by a top-5 (deep-dive) category; score 50 = referenced by an A06-A10 (summary) category. Retrieved 2026-07-08 by Aivistix Research. CC BY 4.0.",
  "filters": {
    "platforms": ["Linux", "Windows", "macOS", "Network", "PRE", "Containers", "SaaS", "IaaS"]
  },
  "sorting": 3,
  "layout": {
    "layout": "side",
    "aggregateFunction": "average",
    "showID": true,
    "showName": true
  },
  "hideDisabled": false,
  "techniques": [
    {"techniqueID": "T1190", "score": 100, "comment": "A01 Broken Access Control, A02 Security Misconfiguration, A05 Injection, A06 Insecure Design", "enabled": true},
    {"techniqueID": "T1548", "score": 100, "comment": "A01 Broken Access Control - Abuse Elevation Control Mechanism", "enabled": true},
    {"techniqueID": "T1068", "score": 100, "comment": "A01 Broken Access Control - Exploitation for Privilege Escalation", "enabled": true},
    {"techniqueID": "T1078", "score": 100, "comment": "A02 Security Misconfiguration / A07 Authentication Failures - Valid Accounts", "enabled": true},
    {"techniqueID": "T1552", "score": 100, "comment": "A02 (metadata creds) / A04 Cryptographic Failures - Unsecured Credentials", "enabled": true},
    {"techniqueID": "T1552.005", "score": 100, "comment": "A02 Security Misconfiguration - Cloud Instance Metadata API (Capital One)", "enabled": true},
    {"techniqueID": "T1195", "score": 100, "comment": "A03 Software Supply Chain Failures - Supply Chain Compromise", "enabled": true},
    {"techniqueID": "T1195.001", "score": 100, "comment": "A03 - Compromise Software Dependencies and Development Tools", "enabled": true},
    {"techniqueID": "T1195.002", "score": 100, "comment": "A03 / A08 - Compromise Software Supply Chain", "enabled": true},
    {"techniqueID": "T1199", "score": 100, "comment": "A03 Software Supply Chain Failures - Trusted Relationship", "enabled": true},
    {"techniqueID": "T1040", "score": 100, "comment": "A04 Cryptographic Failures - Network Sniffing", "enabled": true},
    {"techniqueID": "T1557", "score": 100, "comment": "A04 Cryptographic Failures - Adversary-in-the-Middle", "enabled": true},
    {"techniqueID": "T1059", "score": 100, "comment": "A05 Injection - Command and Scripting Interpreter", "enabled": true},
    {"techniqueID": "T1505.003", "score": 100, "comment": "A05 Injection - Web Shell", "enabled": true},
    {"techniqueID": "T1110", "score": 50, "comment": "A07 Authentication Failures - Brute Force", "enabled": true},
    {"techniqueID": "T1556", "score": 50, "comment": "A07 Authentication Failures - Modify Authentication Process", "enabled": true},
    {"techniqueID": "T1554", "score": 50, "comment": "A08 Software or Data Integrity Failures - Compromise Host Software Binary", "enabled": true},
    {"techniqueID": "T1505", "score": 50, "comment": "A08 Software or Data Integrity Failures - Server Software Component", "enabled": true},
    {"techniqueID": "T1562.008", "score": 50, "comment": "A09 Logging & Alerting Failures - Impair Defenses: Disable/Modify Cloud Logs", "enabled": true},
    {"techniqueID": "T1070", "score": 50, "comment": "A09 Logging & Alerting Failures - Indicator Removal", "enabled": true},
    {"techniqueID": "T1499", "score": 50, "comment": "A10 Mishandling of Exceptional Conditions - Endpoint Denial of Service", "enabled": true},
    {"techniqueID": "T1211", "score": 50, "comment": "A10 Mishandling of Exceptional Conditions - Exploitation for Defense Evasion", "enabled": true}
  ],
  "gradient": {
    "colors": ["#8ec843ff", "#ffe766ff", "#ff6666ff"],
    "minValue": 0,
    "maxValue": 100
  },
  "metadata": [
    {"name": "source", "value": "https://owasp.org/Top10/2025/"},
    {"name": "publisher", "value": "Aivistix Research"},
    {"name": "retrieved", "value": "2026-07-08"}
  ],
  "showTacticRowBackground": true,
  "tacticRowBackground": "#205b8f",
  "selectTechniquesAcrossTactics": true
}