BlankSlate 解析

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (128)

言語

en	102
it	6
fr	6
de	6
ru	4

国・地域

gb	68
us	22
it	6
fr	6
ru	4

アクター

BlankSlate	4
Cerber	2
Ave Maria	1

関心

タイプ

Not Defined	68
WordPress Plugin	8
Content Management System	6
Banking Software	4
Server Management Software	2

ベンダー

Not Defined	32
SourceCodester	14
Wondershare	6
CodeAstro	4
Campcodes	4

製品

Kashipara Food Management System	4
All in One SEO Pack Plugin	4
Wondershare Dr.Fone	4
pacman-canvas	2
Juanpao JPShop	2

脆弱性

#	脆弱性	Base	Temp	0day	本日	悪	修復	EPSS	CTI	CVE
1	DZCP deV!L`z Clanportal config.php 特権昇格	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	0.49	CVE-2010-0966
2	JetBrains PhpStorm idea.log 情報の漏洩	3.8	3.7	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00043	0.00	CVE-2022-48435
3	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash 情報の漏洩	5.3	5.2	$5k-$25k	計算中	High	Workaround	0.02016	0.00	CVE-2007-1192
4	All in One SEO Pack Plugin クロスサイトスクリプティング	5.1	5.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00076	0.04	CVE-2023-0586
5	PHPGurukul Online Notes Sharing System profile.php 未知の脆弱性	4.3	4.1	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00052	0.08	CVE-2023-7052
6	Views for WPForms Plugin create_view 未知の脆弱性	4.3	4.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00052	0.04	CVE-2024-0374
7	All in One SEO Pack Plugin クロスサイトスクリプティング	3.9	3.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00101	0.00	CVE-2023-0585
8	SourceCodester Responsive Ordering System Product_model.php 特権昇格	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00586	0.00	CVE-2021-25206
9	WPForms Pro Plugin 特権昇格	7.6	7.5	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00252	0.08	CVE-2022-3574
10	Wondershare Dr.Fone 特権昇格	7.0	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00082	0.00	CVE-2023-29835
11	WPForms Pro Form Submission クロスサイトスクリプティング	5.9	5.8	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00052	0.04	CVE-2023-7063
12	Netentsec NS-ASG Application Security Gateway list_addr_fwresource_ip.php SQLインジェクション	5.5	5.4	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00061	0.04	CVE-2023-5681
13	Campcodes Simple Student Information System manage_academic.php SQLインジェクション	6.2	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00064	0.08	CVE-2023-5929
14	Campcodes Simple Student Information System index.php SQLインジェクション	6.2	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00064	0.04	CVE-2023-5923
15	CodeAstro Internet Banking System pages_reset_pwd.php クロスサイトスクリプティング	4.4	4.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00052	0.04	CVE-2023-5695
16	SourceCodester Engineers Online Portal downloadable_student.php SQLインジェクション	7.5	7.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00077	0.04	CVE-2023-5276
17	ZZZCMS Database Backup File save.php restore 特権昇格	7.1	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00061	0.00	CVE-2023-5263
18	MicroWorld eScan Anti-Virus runasroot Local Privilege Escalation	7.8	7.6	$5k-$25k	$0-$5k	Proof-of-Concept	Not Defined	0.00042	0.00	CVE-2023-4383
19	Lightxun IPTV Gateway web_upload_template.html 特権昇格	5.0	4.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00063	0.04	CVE-2023-7026
20	SourceCodester Best Courier Management System manage_parcel_status.php クロスサイトスクリプティング	4.1	4.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00050	0.11	CVE-2023-5273

IOC - Indicator of Compromise (9)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IPアドレス	Hostname	アクター	Identified	タイプ	信頼度
1	19.48.17.0		BlankSlate	2022年04月01日	verified	高
2	54.68.27.226	ec2-54-68-27-226.us-west-2.compute.amazonaws.com	BlankSlate	2022年04月01日	verified	中
3	XX.XX.XX.X	xxxxxxx-xxx-xxx-xxx-xxx.xx.xx.xxxx.xxxxxxxxxx.xx	Xxxxxxxxxx	2022年04月01日	verified	高
4	XX.XX.XXX.X	xxx.xx-xx-xx-xxx.xx	Xxxxxxxxxx	2022年04月01日	verified	高
5	XXX.XX.XXX.XX		Xxxxxxxxxx	2022年04月01日	verified	高
6	XXX.XXX.X.XXX	xxx.x.xxx.xxx.xx.xxxxxxxxxxxxxxxxx.xxx	Xxxxxxxxxx	2022年04月01日	verified	中
7	XXX.XXX.XXX.X	xxx.xxxx.xxx.xxxx.xxxxxxx	Xxxxxxxxxx	2022年04月01日	verified	高
8	XXX.XXX.XXX.X	xxx.xx-xxx-xxx-xxx.xx	Xxxxxxxxxx	2022年04月01日	verified	高
9	XXX.XXX.XXX.X		Xxxxxxxxxx	2022年04月01日	verified	高

TTP - Tactics, Techniques, Procedures (14)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	クラス	脆弱性	アクセスベクター	タイプ	信頼度
1	T1006	CAPEC-126	CWE-22, CWE-24	Path Traversal	predictive	高
2	T1040	CAPEC-102	CWE-294	Authentication Bypass by Capture-replay	predictive	高
3	T1055	CAPEC-10	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	高
4	TXXXX	CAPEC-242	CWE-XX	Xxxxxxxx Xxxxxxxxx	predictive	高
5	TXXXX.XXX	CAPEC-209	CWE-XX, CWE-XX	Xxxxx Xxxx Xxxxxxxxx	predictive	高
6	TXXXX	CAPEC-122	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
7	TXXXX	CAPEC-108	CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
8	TXXXX	CAPEC-81	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	高
9	TXXXX	CAPEC-108	CWE-XX	Xxx Xxxxxxxxx	predictive	高
10	TXXXX	CAPEC-112	CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
11	TXXXX	CAPEC-38	CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	高
12	TXXXX	CAPEC-116	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
13	TXXXX.XXX	CAPEC-	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	高
14	TXXXX.XXX	CAPEC-1	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高

IOA - Indicator of Attack (119)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	クラス	Indicator	タイプ	信頼度
1	File	/admin/index.php	predictive	高
2	File	/admin/list_addr_fwresource_ip.php	predictive	高
3	File	/admin/makehtml_freelist_action.php	predictive	高
4	File	/admin/return_add.php	predictive	高
5	File	/admin/save.php	predictive	高
6	File	/admin/service/stop/	predictive	高
7	File	/admin/students/manage_academic.php	predictive	高
8	File	/api/v1/attack/falco	predictive	高
9	File	/application/websocket/controller/Setting.php	predictive	高
10	File	/cgi-bin/cstecgi.cgi	predictive	高
11	File	/cgi-bin/login_action.cgi	predictive	高
12	File	/event/admin/?page=user/list	predictive	高
13	File	/include/file.php	predictive	高
14	File	/index.php	predictive	中
15	File	/index.php?menu=asterisk_cli	predictive	高
16	File	/xxxx/xxxxx/xxxxxx	predictive	高
17	File	/xxxxxxxxxxxxxxx	predictive	高
18	File	/xxxxxxxx/xxxx	predictive	高
19	File	/xxxxxxx/	predictive	中
20	File	/xxxx/xxxxxxx.xxx	predictive	高
21	File	/xxxxxxxxxx.xxx	predictive	高
22	File	/xxxxxx/xxxxx.xxx/xxxxx/xxxxx/xxx_xxxxxx_xxxxxxxx.xxxx	predictive	高
23	File	xxxxxxxxxxxx.xxx	predictive	高
24	File	xxxxx/xxx_xxxxxxxx.xxx	predictive	高
25	File	xxxxx/xxxxxxxxxx/xxxxxxx.xxx	predictive	高
26	File	xxx/xxxxxx/xxxxxx.xxx	predictive	高
27	File	xxx/xxxxx/xxxxxxxxxx/xxxx.xxx	predictive	高
28	File	xxx/xxxx/xxxxx/xxxx.xxx	predictive	高
29	File	xxxxxxx.xxx	predictive	中
30	File	xxxxxxx.xxx	predictive	中
31	File	xxxxxxx.xxx	predictive	中
32	File	xxxxxx-xxxxxxx.xxx	predictive	高
33	File	xxxxxxxxxx.xxx	predictive	高
34	File	xxxxxxxx_xxxxxxx.xxx	predictive	高
35	File	xxxx/xx-xxxxxxx.xxx	predictive	高
36	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	高
37	File	xxxxxxx.xxx	predictive	中
38	File	xxxxxxxxxxxx_xxxxxxx.xxx	predictive	高
39	File	xxxxxx_xxxxx_xxxxxxxx.xxx	predictive	高
40	File	xxxxxxx/xxxx-xxxxx-xxxxxx.xxx	predictive	高
41	File	xxxxxxx/xxxx-xxxxx-xxxxxx.xxx?xxxxxx=x	predictive	高
42	File	xxxx.xxx	predictive	中
43	File	xxx/xxxxxxx/xxxxxxxxxxxxxx.x	predictive	高
44	File	xxxxxxxx/xxxxx.xxx	predictive	高
45	File	xxxx.xxx	predictive	中
46	File	xxx/xxxxxx.xxx	predictive	高
47	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	高
48	File	xxxxx.xxx	predictive	中
49	File	xx/xxxxxxx.x	predictive	中
50	File	xxxxx/xxxx.xxx	predictive	高
51	File	xxxx_xxxx_xxxxxx.xxx	predictive	高
52	File	xxx.x/xxxxxx.x	predictive	高
53	File	xxxxxx/xxx/xxxxxxxxxxx/xxxx_xxxxxxxxxx.xx	predictive	高
54	File	xxxxxxxxxx.xxx	predictive	高
55	File	xxxxxx_xxxxxx_xxxxxx.xxx	predictive	高
56	File	xxxxxxxxxxx_xxxxx_xxxxxxxx.xxx	predictive	高
57	File	xxxxxxxxx.xxx	predictive	高
58	File	xxxxx_xxxxx_xxx.xxx	predictive	高
59	File	xxxxxxx.xxx	predictive	中
60	File	xxxxxxx/xxxxxx-xxxxxxx-xxxx-xxxx.xxxx	predictive	高
61	File	xxxxxxx_xxxxx.xxx	predictive	高
62	File	xxxxxxxx_xxxxx_xxxxxxxx.xxx	predictive	高
63	File	xxxxxxxxx/xxxx/xxxxxxxxx.xxx	predictive	高
64	File	xxxx/xxxx/	predictive	中
65	File	xxxxxxxxx	predictive	中
66	File	xxxx/xxxxx_xxxxxx.xxx	predictive	高
67	File	xxxxxx_xxxxxxx.xxx	predictive	高
68	File	xxx/xxxxxxxxx/xxxxxxxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxx.xxx	predictive	高
69	File	xxxxxx_xxx_xxxxx_xxx.xxx	predictive	高
70	File	xxxxxxxx/xxxxx/xxx_xxx.xxx	predictive	高
71	File	xxxx_x_xxxx.xxx	predictive	高
72	File	xxxxx/xxxx_xxxx.xxx	predictive	高
73	Library	xxx.xxx	predictive	低
74	Argument	$xxxx["xx"]	predictive	中
75	Argument	$_xxxxxx['xxx_xxxx']	predictive	高
76	Argument	$_xxxxxx['xxxxxx_xxxx']	predictive	高
77	Argument	xxxxxx	predictive	低
78	Argument	xxxxxx	predictive	低
79	Argument	xxxxxxxx	predictive	中
80	Argument	xxxxxxx	predictive	低
81	Argument	xxxxxxxxxxxxxx	predictive	高
82	Argument	x_xxxxxx	predictive	中
83	Argument	xxxxxxxxxxx	predictive	中
84	Argument	xxx_xxxx	predictive	中
85	Argument	xxxxxxxx	predictive	中
86	Argument	xxxxxx	predictive	低
87	Argument	xxxxxxxxxxxx	predictive	中
88	Argument	xxxxx	predictive	低
89	Argument	xxxxx/xxxxxxx/xxx/xx	predictive	高
90	Argument	xxxxx_xxxxxxx	predictive	高
91	Argument	xxxxx	predictive	低
92	Argument	xxxx	predictive	低
93	Argument	xxxxx xxxx/xxxx xxxx	predictive	高
94	Argument	xxxxx	predictive	低
95	Argument	xxxx_xxxx	predictive	中
96	Argument	xx	predictive	低
97	Argument	xxx_xxx_xxxxx	predictive	高
98	Argument	xxxxxx	predictive	低
99	Argument	xxxx	predictive	低
100	Argument	xxxx	predictive	低
101	Argument	xxxxxxxx	predictive	中
102	Argument	xxx_xxxxx_xx	predictive	中
103	Argument	xxxxxxxxxx/xxxx/xxxxxxxx/xxxx/xxxxxxx_xxxx	predictive	高
104	Argument	xxxxxxxx	predictive	中
105	Argument	xxxxxxxx	predictive	中
106	Argument	xxxx_xxxx	predictive	中
107	Argument	xxxxxxx	predictive	低
108	Argument	xxxxxxx	predictive	低
109	Argument	xxx	predictive	低
110	Argument	xxxxxxx	predictive	低
111	Argument	xxxxxxx	predictive	低
112	Argument	xxxx_xxxx	predictive	中
113	Argument	x_xxxx/x_xxxx	predictive	高
114	Argument	xxx	predictive	低
115	Argument	xxxxxxxx/xxxxxxxx	predictive	高
116	Input Value	(xxxxxxxxx(xxxx,xxxxxx(xxxx,xxxxxxxxxxxx,(xxxxxx (xxx(xxxx=xxxx,x))),xxxxxxxxxxxx),xxxx))	predictive	高
117	Input Value	<xxxxxx>xxxxx(xxxxxxxx.xxxxxx)</xxxxxx>	predictive	高
118	Input Value	xxxxxxx%xxxxxxxxx.xxx'%xx%xx<xxxxxx%xx>xxxxx(xxxx)</xxxxxx>	predictive	高
119	Network Port	xxx/xx (xxx)	predictive	中

参考 (3)

The following list contains external sources which discuss the actor and the associated activities:

◂ 前概要次 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!