High-risk tools in Dap
7 of the 14 tools in Dap are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
launchExecuteLaunch the debuggee program. Set breakpoints before launching if necessary.
-
change_frameExecuteChange the current debugging frame to the specified frame ID.
-
continue_executionExecuteContinue execution in the debugger after hitting a breakpoint.
-
evaluateExecuteEvaluate an expression in the current debugging context.
-
nextExecuteStep over to the next line of code in the debugger.
-
step_inExecuteStep into the function call in the debugger.
-
step_outExecuteStep out of the current function in the debugger.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.