Royal Road Analysis

IOB - Indicator of Behavior (164)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en138
de10
fr8
es6
it2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

us94
cz12
ru10
gb8
ca8

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

Microsoft Windows8
Apache HTTP Server4
Apache Tomcat4
WordPress4
ZEIT Next.js2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemCTIEPSSCVE
1MidiCart PHP Shopping Cart item_show.php sql injection6.36.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.040.00000
2nginx request smuggling6.96.9$0-$5k$0-$5kNot DefinedNot Defined4.050.00000CVE-2020-12440
3Apache HTTP Server mod_rewrite redirect6.76.7$25k-$100k$5k-$25kNot DefinedNot Defined0.160.07767CVE-2020-1927
4ProFTPD mod_copy access control8.58.5$0-$5k$0-$5kNot DefinedNot Defined0.030.70009CVE-2019-12815
5Microsoft Exchange Server Privilege Escalation8.57.6$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.040.01967CVE-2021-26412
6Gempar Script Toko Online shop_display_products.php sql injection7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.080.00986CVE-2009-0296
7Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure5.35.2$5k-$25kCalculatingHighWorkaround0.040.04187CVE-2007-1192
8Mihalism Multi Host users.php sql injection7.37.3$0-$5kCalculatingHighUnavailable0.040.00986CVE-2008-0714
9Microsoft IIS cross site scripting5.24.7$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.380.25090CVE-2017-0055
10Mailman input validation6.56.2$0-$5kCalculatingNot DefinedOfficial Fix0.010.01018CVE-2018-13796
11WordPress Thumbnail input validation7.57.5$5k-$25k$5k-$25kNot DefinedNot Defined0.050.04571CVE-2018-1000773
12XenForo privileges management8.67.9$0-$5k$0-$5kNot DefinedOfficial Fix0.000.00000
13DCP-Portal forums.php sql injection7.37.3$0-$5k$0-$5kNot DefinedNot Defined0.020.00000
14Ideal BB.NET forums.aspx cross site scripting3.53.3$0-$5kCalculatingProof-of-ConceptNot Defined0.010.00000
15logwatch logwatch.pl input validation9.89.3$0-$5k$0-$5kProof-of-ConceptNot Defined0.020.12567CVE-2011-1018
16OpenSSH Authentication Username information disclosure5.34.8$5k-$25k$0-$5kHighOfficial Fix0.290.49183CVE-2016-6210
17Microsoft Exchange Server Privilege Escalation8.88.1$25k-$100k$5k-$25kUnprovenOfficial Fix0.050.25101CVE-2022-23277
18Mikrotik RouterOS Hotspot Process out-of-bounds7.67.4$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.050.01086CVE-2022-45313
19Microsoft Windows DNS Server Remote Code Execution9.88.5$100k and more$5k-$25kUnprovenOfficial Fix0.040.01875CVE-2021-26897
20Microsoft Windows Server Service Remote Code Execution8.88.1$100k and more$5k-$25kUnprovenOfficial Fix0.010.01601CVE-2022-24541

Campaigns (1)

These are the campaigns that can be associated with the actor:

  • Royal Road

IOC - Indicator of Compromise (4)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (13)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (90)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File/bin/shpredictiveLow
2File/oauth/authorizepredictiveHigh
3File/see_more_details.phppredictiveHigh
4File/uncpath/predictiveMedium
5File/webmail/predictiveMedium
6File/_nextpredictiveLow
7Fileadmin/index.phppredictiveHigh
8Fileassets/add/registrar.phppredictiveHigh
9Filebooking.phppredictiveMedium
10Filebooks.phppredictiveMedium
11Filecart.phppredictiveMedium
12Filexxxxxxxxx.xxxxpredictiveHigh
13Filexxx-xxxx.xxxpredictiveMedium
14Filexxx-xxxpredictiveLow
15Filexxx-xxx/xxxxxxxxxxxx.xxxpredictiveHigh
16Filexxxxxx/xxx/x_xxxxxxxx_xxxxxxxx.xpredictiveHigh
17Filexxxxxxxx_xxxxxxxxxxxx.xxxpredictiveHigh
18Filexxxx/xxxxxxxxxxxxxxx.xxxpredictiveHigh
19Filexxxxx.xxx?xxx=xxxx&xxxxxx=xxxxxxxxxpredictiveHigh
20Filexxxxxx.xxxxpredictiveMedium
21Filexxxxxx.xxxpredictiveMedium
22Filexxxx.xpredictiveLow
23Filexxxx.xxxpredictiveMedium
24Filexxxxx.xxxpredictiveMedium
25Filexxxx_xxxx.xxxpredictiveHigh
26Filexxxxx.xxxpredictiveMedium
27Filexxxxxxxx.xxpredictiveMedium
28Filexxxxxxx/xxxxxxx/xxx_xxxxxxx.xpredictiveHigh
29Filexxx/xxxxx.xxxxpredictiveHigh
30Filexxxxxxx/xxxxxxxxxxxxxxxx/xxxxxxxxx/xxxxxxxx.xxxxpredictiveHigh
31Filexxxxxxxxx.xxxxpredictiveHigh
32Filexxxx.xxxpredictiveMedium
33Filexxxxxxxx.xxxpredictiveMedium
34Filexxxxxxxxx/xxxxxx.xpredictiveHigh
35Filexxx.xpredictiveLow
36Filexxxxxxxx/xxxxx/xxxxxxx.xxpredictiveHigh
37Filexxxx_xxxxxxx_xxxxxxxx.xxxpredictiveHigh
38Filexxxxxxxx.xxxpredictiveMedium
39Filexxxxxx/xxxxxxx/xxxxxxx/xxxxxx.xxxpredictiveHigh
40Filexxxx-xxxxx_xxxxxxx.xxxpredictiveHigh
41Filexxxxx.xxxpredictiveMedium
42Filexxxx/xxxxxxxx/xxxxxxxx.xxxxpredictiveHigh
43Filexxxxxx.xxxpredictiveMedium
44Filexxxxxx/xx/xxxx.xxxpredictiveHigh
45Filexxxxxxx/xxxxxx/xxxxx/xxxxxxx/xxx/xxx.xxxpredictiveHigh
46Filexx-xxxxx/xxxxx-xxxx.xxxpredictiveHigh
47Filexx-xxxxx/xxxxx.xxx?xxxx=xxxxxxxxxxx-xxxx&xxpredictiveHigh
48Filexx-xxxxx/xxxxx.xxx?xxxx=xxx-xxxxx&xxxxxx=xxxx-xxxxxpredictiveHigh
49Filexx-xxxxx/xxxxxxx-xxxxxxx.xxxpredictiveHigh
50Filexx-xxxxxxxx/xxxxxxx-xxxxxxxx.xxxpredictiveHigh
51Libraryxxxxxxxx.xxxpredictiveMedium
52Argument--xxxpredictiveLow
53Argumentxxx_xxxxpredictiveMedium
54ArgumentxxxxxpredictiveLow
55ArgumentxxxxxxpredictiveLow
56ArgumentxxxpredictiveLow
57ArgumentxxxxxpredictiveLow
58Argumentxxx_xxpredictiveLow
59ArgumentxxxpredictiveLow
60Argumentxxxx_xxpredictiveLow
61Argumentxxxx/xxxxpredictiveMedium
62ArgumentxxxxxxxpredictiveLow
63ArgumentxxpredictiveLow
64Argumentxxxx_xxxxxxxpredictiveMedium
65ArgumentxxpredictiveLow
66ArgumentxxxxpredictiveLow
67ArgumentxxxxpredictiveLow
68ArgumentxxpredictiveLow
69ArgumentxxxxxxpredictiveLow
70ArgumentxxxxpredictiveLow
71ArgumentxxxxxpredictiveLow
72ArgumentxxpredictiveLow
73ArgumentxxxxxxxxpredictiveMedium
74ArgumentxxxxxxxxpredictiveMedium
75Argumentxxxx_xxpredictiveLow
76Argumentxxxxxxxx_xxxx/xxxxxx_xx/xxxxxxxx_xxxpredictiveHigh
77Argumentxxxxxx/xxxxxpredictiveMedium
78ArgumentxxxxxxpredictiveLow
79ArgumentxxxxxxpredictiveLow
80ArgumentxxxxxpredictiveLow
81Argumentxxxxxxxxxx[xxxx]predictiveHigh
82Argumentxxxxxxxxxxx_xxpredictiveHigh
83ArgumentxxxpredictiveLow
84ArgumentxxxxxxxxpredictiveMedium
85Argumentxxxx->xxxxxxxpredictiveHigh
86Input Value.%xx.../.%xx.../predictiveHigh
87Input Valuexxx.xxx[xxxxx]predictiveHigh
88Input Value…/.predictiveLow
89PatternxxxxxxxxpredictiveMedium
90Pattern|xx xx xx xx|predictiveHigh

References (2)

The following list contains external sources which discuss the actor and the associated activities:

Do you want to use VulDB in your project?

Use the official API to access entries easily!