Bitter 解析

IOB - Indicator of Behavior (641)

タイムライン

言語

en570
de34
es10
ru10
fr8

国・地域

us316
tr32
co30
gb24
ru20

アクター

アクティビティ

関心

タイムライン

タイプ

ベンダー

製品

Microsoft Windows14
Apache HTTP Server14
Google Android12
WordPress8
Joomla CMS8

脆弱性

#脆弱性BaseTemp0day本日修復EPSSCTICVE
1LogicBoard CMS away.php Redirect6.36.1$0-$5k$0-$5kNot DefinedUnavailable0.000004.12
2MGB OpenSource Guestbook email.php SQLインジェクション7.37.3$0-$5k$0-$5kHighUnavailable0.013020.81CVE-2007-0354
3FLDS redir.php SQLインジェクション7.37.3$0-$5k$0-$5kHighUnavailable0.002030.16CVE-2008-5928
4TikiWiki tiki-register.php 特権昇格7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.010758.44CVE-2006-6168
5vBulletin redirector.php Redirect6.66.6$0-$5k$0-$5kNot DefinedNot Defined0.001060.05CVE-2018-6200
6Serendipity exit.php 特権昇格6.36.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.32
7Apple Mac OS X Server Wiki Server SQLインジェクション5.34.6$5k-$25k$0-$5kUnprovenOfficial Fix0.003392.79CVE-2015-5911
8Bitrix Site Manager redirect.php 特権昇格5.34.7$0-$5k$0-$5kUnprovenUnavailable0.001130.04CVE-2008-2052
9PHPWind goto.php Redirect6.36.3$0-$5k$0-$5kNot DefinedNot Defined0.003480.28CVE-2015-4134
10Microsoft IIS クロスサイトスクリプティング5.24.7$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.005480.08CVE-2017-0055
11My Link Trader out.php SQLインジェクション6.35.7$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.08
12GetSimpleCMS index.php Redirect6.66.6$0-$5k$0-$5kNot DefinedNot Defined0.001230.00CVE-2019-9915
13WordPress AdServe adclick.php SQLインジェクション7.36.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.000730.04CVE-2008-0507
14PHPWind goto.php クロスサイトスクリプティング4.34.3$0-$5k$0-$5kNot DefinedNot Defined0.002540.04CVE-2015-4135
15Popup Builder Plugin ディレクトリトラバーサル6.36.0$0-$5k$0-$5kNot DefinedOfficial Fix0.000880.00CVE-2021-25082
16Interspire Email Marketer Dynamiccontenttags.php SQLインジェクション7.57.5$0-$5k$0-$5kNot DefinedNot Defined0.000870.07CVE-2018-19551
17phpPgAds adclick.php 未知の脆弱性5.35.3$0-$5k$0-$5kNot DefinedNot Defined0.003170.48CVE-2005-3791
18Vunet VU Web Visitor Analyst redir.asp SQLインジェクション7.37.1$0-$5k$0-$5kHighWorkaround0.001190.04CVE-2010-2338
19MiCODUS MV720 GPS Tracker 特権昇格6.36.2$0-$5k$0-$5kNot DefinedNot Defined0.000540.00CVE-2022-34150
20Sales / Company Management System member_order.php SQLインジェクション8.58.5$0-$5k$0-$5kNot DefinedNot Defined0.001720.00CVE-2018-19925

IOC - Indicator of Compromise (17)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (26)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueクラス脆弱性アクセスベクタータイプ信頼度
1T1006CAPEC-126CWE-21, CWE-22Path Traversalpredictive
2T1040CAPEC-102CWE-319Authentication Bypass by Capture-replaypredictive
3T1055CAPEC-10CWE-74Improper Neutralization of Data within XPath Expressionspredictive
4T1059CAPEC-137CWE-88, CWE-94Argument Injectionpredictive
5T1059.007CAPEC-209CWE-79, CWE-80Cross Site Scriptingpredictive
6T1068CAPEC-104CWE-250, CWE-264, CWE-269, CWE-271, CWE-284Execution with Unnecessary Privilegespredictive
7TXXXX.XXXCAPEC-191CWE-XXXXxxx-xxxxx Xxxxxxxxxxxpredictive
8TXXXXCAPEC-136CWE-XX, CWE-XXXxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxxpredictive
9TXXXX.XXXCAPEC-178CWE-XXXXxxx Xxxxxxxxpredictive
10TXXXXCAPEC-CWE-XXX7xx Xxxxxxxx Xxxxxxxxpredictive
11TXXXXCAPEC-CWE-XXXXxxxxxxxxx Xxxxxxpredictive
12TXXXX.XXXCAPEC-492CWE-XXXXXxxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxxxpredictive
13TXXXXCAPEC-108CWE-XXXxx Xxxxxxxxxpredictive
14TXXXX.XXXCAPEC-1CWE-XXXXxxxxxxx Xxxxxxxxxxxxxpredictive
15TXXXXCAPEC-50CWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxxxx Xxxxxxxxxxpredictive
16TXXXXCAPEC-37CWE-XXXXxxxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxxpredictive
17TXXXXCAPEC-466CWE-XXXXxxxxxx Xxxxxxxxxx Xx Xxx-xxxxxxxxpredictive
18TXXXX.XXXCAPEC-154CWE-XXXXxxxxxxxxxxxpredictive
19TXXXXCAPEC-38CWE-XXX, CWE-XXXXxxxxxxxx Xxxxxx Xxxxpredictive
20TXXXX.XXXCAPEC-142CWE-XXXXxxxxxxx Xx Xxx Xxxxxxx Xx X Xxxxxxxx Xxxxxxxxpredictive
21TXXXX.XXXCAPEC-459CWE-XXXXxxxxxxx Xxxxxxxxxxx Xxxxxxxxxxpredictive
22TXXXX.XXXCAPEC-133CWE-XXXXxxxxxxxpredictive
23TXXXXCAPEC-116CWE-XXX, CWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxxpredictive
24TXXXX.XXXCAPEC-CWE-XXXxxxxxxxxxxxxpredictive
25TXXXXCAPEC-157CWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxxxxxx Xxxxxxpredictive
26TXXXX.XXXCAPEC-1CWE-XXXXxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxxpredictive

IOA - Indicator of Attack (279)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDクラスIndicatorタイプ信頼度
1File.htaccesspredictive
2File/acms/classes/Master.php?f=delete_cargopredictive
3File/admin.php/news/admin/topic/savepredictive
4File/admin/comn/service/update.jsonpredictive
5File/admin/moduleinterface.phppredictive
6File/classes/master.php?f=delete_orderpredictive
7File/dev/shmpredictive
8File/dl/dl_print.phppredictive
9File/etc/gsissh/sshd_configpredictive
10File/forms/nslookupHandlerpredictive
11File/forum/away.phppredictive
12File/getcfg.phppredictive
13File/h/autoSaveDraftpredictive
14File/index.phppredictive
15File/librarian/bookdetails.phppredictive
16File/modules/profile/index.phppredictive
17File/news.dtl.phppredictive
18File/ofcms/company-c-47predictive
19File/out.phppredictive
20File/patient/appointment.phppredictive
21File/protocol/iscgwtunnel/uploadiscgwrouteconf.phppredictive
22File/ptms/?page=userpredictive
23File/systemrw/predictive
24File/uncpath/predictive
25File/upload/file.phppredictive
26File/usr/sbin/httpdpredictive
27File/util/print.cpredictive
28File/web/MCmsAction.javapredictive
29File/wp-admin/admin-ajax.phppredictive
30File/wp-content/plugins/woocommerce/templates/emails/plain/predictive
31File5.2.9\syscrb.exepredictive
32Fileabc-pcie.cpredictive
33Fileaccounts/payment_history.phppredictive
34Fileadclick.phppredictive
35Filexxxxx.xxxpredictive
36Filexxxxx.xxx/xxxxx/xxxxxxxxx/xxxxx/xxxxx/xxxxxx.xxxxpredictive
37Filexxxxx/xxxxxxxx.xxx.xxxpredictive
38Filexxxxx/xxxx_xxxxx_xxxx.xxxpredictive
39Filexxxxx/xxxxxx/xxxxx-xxxxxx-xxxxxxxx.xxxpredictive
40Filexxxxx/xxxxx.xxxpredictive
41Filexxxxx/xxxxxx.xxx/xxxxxx.xxx.xxxpredictive
42Filexxxxxx/predictive
43Filexxxxx-xxx.xpredictive
44Filexx_xxxxx_xxxxx.xxxpredictive
45Filexxxxxxxx.xxxpredictive
46Filexxxxxxxx.xxxpredictive
47Filexxx-xxxx.xxxpredictive
48Filexxxxx/xxxxxxxxxxxxxx/xxxxxxxxxxx.xxxpredictive
49Filexxxxxxxx.xxxpredictive
50Filexxxxx.xxxpredictive
51Filexxxxxxxxx/xxxxxxxx/xxxx/xxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxpredictive
52Filexxxx/xxxxxxxxxxxxxxx.xxxpredictive
53Filexxxxxxxxx.xpredictive
54Filexxxx\xx_xx.xxxpredictive
55Filexxxxxxx.xxxpredictive
56Filexxxxxxx/xxx/xx/xxxxxxxxxx.xpredictive
57Filexxxxxxxxxxxxxxxxxx.xxxpredictive
58Filexxxxx.xxxpredictive
59Filexx/xxxxx/xxxxxx_xxxxx.xxxpredictive
60Filexxxxxxxx.xxxpredictive
61Filexxxxxxxxxxxxxxxxxxxxxxxx.xxxxpredictive
62Filexxxx.xxxpredictive
63Filexxx/xxx/xxx_xxxxxxxx.xpredictive
64Filexxxx_xxxxx.xxxpredictive
65Filexxxxxxx_x.xpredictive
66Filexxxxxxx.xxxpredictive
67Filexxxxxxx-xxxxxx/xxxxxxxx/xxxxx/xxxxxxxx/xxxxxxx_xxxxxxx.xxxpredictive
68Filexxxx.xxxpredictive
69Filexxxxx_xxxxxxxx.xxxpredictive
70Filexxxxxxxxxxxxxxxxxxx.xxxxpredictive
71Filexxxxxxxxxxxxxxxxxxx.xxxxpredictive
72Filexxxxxxx/xxxxxxx.xxx.xxxpredictive
73Filexxxxxxxx/xxxxx/xxxxx/xxxxxxxxxxx.xxxpredictive
74Filexxxxxxxx/xxxxxxxx/xxxxxxxxxxxxxxxxxxxxx.xxxpredictive
75Filexxxxx.xxxpredictive
76Filexxxxx.xxx/xxxx/xxxxx/xxxx/xxxx.xxxpredictive
77Filexxxxx.xxx?xx=xxxxxxx&xxx=xxxpredictive
78Filexxxxx.xxx?x=/xxxx/xxxxxxxxpredictive
79Filexxxx.xxxpredictive
80Filexxxxxxxxx/xxxxxxxxx/xxxxxxxxx_xxxxx_xxx.xxxpredictive
81Filexxxxxxxx/xxxxxxxx_xxxxxxx_xxxxxx/xxxxx.xxxpredictive
82Filexxxxxxxxxx.xxxpredictive
83Filexxxxxx.xxx/xxxxxx.xxxpredictive
84Filexxxxxxxx/xxxx_xxxx.xpredictive
85Filexxxxx.xxxpredictive
86Filexxxx/xxxxx.xxxpredictive
87Filexxx_xxxxxx_xxxxxx.xxpredictive
88Filexxxxxx/xxxxxx_xxxx.xxxpredictive
89Filexxxxxx/xxxxxx_xxxxx.xxxpredictive
90Filexxxxxxxxx.xxxpredictive
91Filexxxxxx/xxxxxxxx/xxx.xxxpredictive
92Filexxxxxxxxxxxxxxx.xxxpredictive
93Filexxx_xxx_xxxxxx.xpredictive
94Filexxx_xxxxx_xxxx.xpredictive
95Filexxxxxxxxx.xxxpredictive
96Filexxx/xxxxxxxxx/x_xxxxxx.xpredictive
97Filexxxxxxxxxxxxxxxx.xxxpredictive
98Filexxxxxxxxxxxxxxxxxxxxxxxxxx.xxxxpredictive
99Filexxx_xxxx.xxxpredictive
100Filexxxx.xxxpredictive
101Filexxxxxx/xxx_xxxxxx/xpredictive
102Filexxxxxxxxxxxx.xxxpredictive
103Filexxxxxxxxxxxxxxxxxx.xxxpredictive
104Filexxxxxxx/xx_xxxxx_xxxx/xxxx.xxxpredictive
105Filexxxxxxx/xxxxxxxxxxxxxxxx/xxxxxxxxx/xxxxxxxx.xxxxpredictive
106Filexxxxxxx/xxxxxxx/xxx/xxxxxxxxxx.xxx?xxxxxxxx=xxxx&xxxxxx=xxxxxxxxxxpredictive
107Filexxxxxxx.xxxpredictive
108Filexxxx.xxxpredictive
109Filexxxxxxxx_xxx_xxxxxxxxxx.xxxpredictive
110Filexxxxxxxxxxxxxx.xxxpredictive
111Filexxxxxxxx.xpredictive
112Filexxxxxx/?x=xxxxx/\xxxxx\xxx/xxxxxxxxxxxxxx&xxxxxxxx=xxxx_xxxx_xxxx_xxxxx&xxxx[x]=xxxxxx&xxxx[x][]predictive
113Filexxxxxxx.xxxpredictive
114Filexxxxx.xxxpredictive
115Filexxxxx.xxxpredictive
116Filexxxxxxxx.xxpredictive
117Filexxxxxxxx.xxxpredictive
118Filexxxxxxxxxx.xxxpredictive
119Filexxxxxxxx.xxxpredictive
120Filexxxxxxxxxxxx_xxxxxxxx.xxx.xxxpredictive
121Filexxxxxxxxxxx.xxxxpredictive
122Filexxx.xxxpredictive
123Filexxxxxx.xxpredictive
124Filexxxxxxxxxxxx.xxxpredictive
125Filexxxxxxxx.xxxpredictive
126Filexxxx.xxxpredictive
127Filexxxxxxxxxxxxxxxx.xxxpredictive
128Filexxxxxxxxxxxxxx.xxxpredictive
129Filexxxx_xxxxxxx_xxxxxxxx.xxxpredictive
130Filexxx/xxxxxx/xxxxx/xxx.xxpredictive
131Filexxx/xxxx/xxxx/xxx/xxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxxpredictive
132Filexx_xxxx/xx_xxxxxx.xpredictive
133Filexxx.xxxpredictive
134Filexxxxx_xxxxx.xxxpredictive
135Filexxx_xxxxxxxx.xpredictive
136Filexxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxxpredictive
137Filexxxxxx_xxxxxxxx.xxxpredictive
138Filexxxxxx/xxx/xx/xxx.xpredictive
139Filexxxxxxx-xxxxxxx.xxxpredictive
140Filexxxxxxxxxxxxxxxxxx.xxxpredictive
141Filex_xxxxxx.xxxpredictive
142Filexxxxxxxx/xxxxxxxxx.xxxxxxx_xxxxxxxxx.xxxpredictive
143Filexxxxxxxxx/xxxxxxxxx/xxxx-xxx.xxx.xxxpredictive
144Filexxxx-xxxpredictive
145Filexxxx-xxxxx.xxxpredictive
146Filexxxx-xxxxxxxx.xxxpredictive
147Filexxxxxxx/xxxxx.xxxpredictive
148Filexxxxxxxxxxx_xxxxxx_xxxx.xxxx.xxxpredictive
149Filexxx.xxxpredictive
150Filexxxxxx.xxxpredictive
151Filexxxxxxx/xxxx/xxxxxxx_xxxxxxxx_xxxx.xxxpredictive
152Filexxxxxxx/xxxxxxx/xxxxxx/xxxxxx_xxxxxx_xxxx.xxxpredictive
153Filexxx.xxxpredictive
154Filexxxxxxxx/xxxxxxxxpredictive
155Filexxxxx/xxxxxxxx-xxxxxxxxx.xxxpredictive
156Filexxxxxxx.xpredictive
157Filexxxxx/xxxxx.xxpredictive
158Filexx\xxxxxxx\xxxx-xxxx.xxxpredictive
159Filexxxxxx/xx/xxxx.xxxpredictive
160Filexxxxxxxx.xxxpredictive
161Filexxxxxx/xxxxxxxxxxxxx.xxxpredictive
162Filexxxxxx_xxxxxx.xxxpredictive
163Filexxxxxxxxx.xxxpredictive
164Filexx-xxxxx/xxxxx-xxxx.xxxpredictive
165File_xxxxxx/xxxxxxxx.xpredictive
166Library/_xxx_xxx/xxxxx.xxxpredictive
167Libraryxxxxxxx.xxpredictive
168Libraryx:/xxxxxxx xxxxx/xxxxx/xxxxxxx.xxxpredictive
169Libraryxxxxxx[xxxxxx_xxxxpredictive
170Libraryxxx/xxx/xxxx.xxxxx.xxxpredictive
171Argument$_xxxxxxx["xxx"]predictive
172Argument-xpredictive
173Argumentxxxxxxpredictive
174Argumentxxxxxxxpredictive
175Argumentxxx_xxxxxxxxxxpredictive
176Argumentxxxxxxxx_x/xxxxxxxx_xpredictive
177Argumentxxxxx_xxxx/xxx_xxxx/xxxx_xxpredictive
178Argumentxxxxxxx[]predictive
179Argumentxxxxxxxxxpredictive
180Argumentxxxpredictive
181Argumentxxxxxxxxxpredictive
182Argumentxxxxxxxxxxpredictive
183Argumentxxxxxxxx[xxxxxxx]predictive
184Argumentxxxxxpredictive
185Argumentxxx_xxpredictive
186Argumentxxxpredictive
187Argumentxxxxxxxxxxxxxxxpredictive
188Argumentxxxxxxxxxpredictive
189Argumentxxxxxxxxxpredictive
190Argumentxxxxxx[xxxxxx_xxxx]predictive
191Argumentxxxxxxxxx[x]predictive
192Argumentxxxxxx x xxx xxxxxxxxxxpredictive
193Argumentxx-xxx-xpredictive
194Argumentxxxxxxxxxxxpredictive
195Argumentx_xxxxxx.xxxx_xxxxxpredictive
196Argumentx_xxpredictive
197Argumentxxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxpredictive
198Argumentxxxxpredictive
199Argumentxxxxxxxpredictive
200Argumentxxxxx/xxxxxxxxpredictive
201Argumentxxxxx/xxxxxxpredictive
202Argumentxxxxxx_xxxx_xxxxxxxxpredictive
203Argumentxxxxxx/xxxxxxxxxxxx/xxxxpredictive
204Argumentxxxxxxxxxpredictive
205Argumentxxxxxxxx-xxxxxxpredictive
206Argumentxxxxxxxxxpredictive
207Argumentxxxxxpredictive
208Argumentxxxxxxxxxpredictive
209Argumentxxxxxxxxxpredictive
210Argumentxxxxpredictive
211Argumentxxxxxxxxpredictive
212Argumentxxxxpredictive
213Argumentxxpredictive
214Argumentxx/xxxxpredictive
215Argumentxxxx/xxx/xxxxxxxx/xxxxx/xxxx/xxxxpredictive
216Argumentxxxpredictive
217Argumentxxxpredictive
218Argumentxxxxxpredictive
219Argumentxxxxxxxxxpredictive
220Argumentxxxxpredictive
221Argumentxxxx/xxxxxx_xxxxpredictive
222Argumentxxxxpredictive
223Argumentxxxxxxpredictive
224Argumentxx_xxxxxxxxxxxpredictive
225Argumentxxxxxxxpredictive
226Argumentxxxxxxxxx_xxxxxxxx_xxxxpredictive
227Argumentxxxxpredictive
228Argumentxxxxpredictive
229Argumentxxxxxxxxpredictive
230Argumentxxxxxxxxxxxxxxpredictive
231Argumentxxpredictive
232Argumentxxxxxpredictive
233Argumentxxxxpredictive
234Argumentxxxxxxxxpredictive
235Argumentxxxxxxxxpredictive
236Argumentxxxxpredictive
237Argumentxxxx_xxxpredictive
238Argumentxxxxx_xxxx_xxxxpredictive
239Argumentxxxxxpredictive
240Argumentxxxxxxpredictive
241Argumentxxxxxxx_xx/xxxx_xxpredictive
242Argumentxxxxxxxxxxpredictive
243Argumentx_xxpredictive
244Argumentxxxxxxxxpredictive
245Argumentxxxxxxpredictive
246Argumentxxxxxpredictive
247Argumentxxxxxx xxxxpredictive
248Argumentxxxxxx_xxxxxxpredictive
249Argumentxxxxpredictive
250Argumentxxxx_xxxxpredictive
251Argumentxxxxxxxxxxxpredictive
252Argumentxxxpredictive
253Argumentxxxxxxxxxpredictive
254Argumentxxxxxxpredictive
255Argumentxxxxxxpredictive
256Argumentxxxxxx($xxx)predictive
257Argumentxxxpredictive
258Argumentxxxxxpredictive
259Argumentxxxxxpredictive
260Argumentxxxxpredictive
261Argumentxxxx/x_xxxxxpredictive
262Argumentxxxpredictive
263Argumentxxxxxxxxpredictive
264Argumentxxxxxxxxpredictive
265Argumentxxxx xxxxpredictive
266Argumentxxxxxxxxpredictive
267Argumentxxxx_xxxxxpredictive
268Argumentxxxxxpredictive
269Argumentxxxxxpredictive
270Argumentx-xxxxxxxxx-xxxpredictive
271Input Value'"<xxxxxx>xxxxx(/xxxx.xx/)</xxxxxx>predictive
272Input Value' xxx (xxxxxx xxxx xxxx (xxxxxx(xxxxx(x)))xxxx)-- xxxxpredictive
273Input Value.%xx.../.%xx.../predictive
274Input Value../predictive
275Input Valuexxxxx' xxx (xxxxxx xxxx xxxx (xxxxxx(xxxxx(x)))xxxx) xxx 'xxxx'='xxxx&xxxxxxxx=xxxxxxxxxxpredictive
276Input Valuexxxxx%xxxxxx.xxx ' xxx (xxxxxx xxxx xxxx (xxxxxx(xxxxx(x)))xxxx) xxx 'xxxx'='xxxxpredictive
277Input Value|xxx${xxx}predictive
278Network Portxxxxxpredictive
279Network Portxxxxxpredictive

参考 (6)

The following list contains external sources which discuss the actor and the associated activities:

Do you need the next level of professionalism?

Upgrade your account now!