T1588Resource Development
Obtain Capabilities
Adversaries may buy and/or steal capabilities that can be used during targeting. Rather than developing their own capabilities in-house, adversaries may purchase, freely download, or steal them. Activities may include the acquisition of malware, software (including licenses), exploits, certificates, and information relating to vulnerabilities. Adversaries may obtain capabilities to support their…
CVEs1
In CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it.1
Reports0
Detections
2 Sigma rules tagged T1588Obtain CapabilitiesT15882 general rules
Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.
CVEs linked to Obtain Capabilities
1 CVE, by priority. Each link shows its badge.- CVE-2023-39780ASUS RT-AX55 Routers OS Command Injection VulnerabilityMITRE CTID mapping of the KEV entry · how it is exploited39.5%Top 1.4%68.9priority
Linked through a sub-technique
4 more- CVE-2023-34048VMware vCenter Server Out-of-Bounds Write Vulnerability99.2%Top 0.06%73.7priority
- CVE-2025-04117-Zip Mark of the Web Bypass Vulnerability67.1%Top 0.7%67.8priority
- CVE-2025-42599Qualitia Active! Mail Stack-Based Buffer Overflow VulnerabilityQualitia · Active! MailKEVCritical · 9.8T1588.006VulnerabilitiesT1190Exploit Public-Facing Application+2 more3.4%Top 11%62.6priority
- CVE-2019-3762Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust…0.6%Top 49%15.5priority