Attacks/Tool Shadow/SHADOW-010

CRITICALCWE-506

SHADOW-010 Multi-Vector Shadow Attack via SQL Injection

Tool Shadow: Attempts to shadow, replace, or proxy legitimate tools to intercept data or modify behavior

Description

Combines SQL injection with credential extraction through the insecure proxy

Remediation

Block bulk tool registration. Detect coordinated tool deployment patterns.

Severity

CRITICAL

OASB Control

CWE

CWE-506

PreviousSHADOW-009 Unsigned Document Signing via Proxy NextPARSE-001 JSON Comment Injection