TokyoX Analysis

IOB - Indicator of Behavior (16)

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Lang

en12
zh4

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Country

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Actors

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Activities

Interest

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

phpMyAdmin4
WordPress2
WP Database Backup Plugin2
Plone2
PunBB2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vulnerabilities

#VulnerabilityBaseTemp0dayTodayExpRemCTIEPSSCVE
1ClipperCMS index.php server-side request forgery7.67.5$0-$5k$0-$5kNot DefinedNot Defined0.040.00885CVE-2022-41497
2WP Database Backup Plugin Setting cross site scripting3.63.5$0-$5k$0-$5kNot DefinedOfficial Fix0.130.00885CVE-2022-2271
3Tableau Password access control4.34.1$0-$5k$0-$5kNot DefinedOfficial Fix0.020.00885CVE-2022-22127
4Alt-N MDaemon Worldclient injection4.94.7$5k-$25k$0-$5kNot DefinedOfficial Fix0.030.10855CVE-2021-27182
5Intel Baseboard Management Controller memory corruption7.47.4$5k-$25k$5k-$25kNot DefinedNot Defined0.060.00885CVE-2019-11182
6Intel Baseboard Management Controller access control8.58.2$5k-$25k$0-$5kNot DefinedOfficial Fix0.050.01086CVE-2018-12171
7Microsoft Outlook Express InetComm.dll MimeOleClearDirtyTree resource management5.35.3$5k-$25k$0-$5kNot DefinedNot Defined0.010.13105CVE-2008-5424
8phpMyAdmin PMA_safeUnserialize deserialization9.89.6$5k-$25k$0-$5kNot DefinedOfficial Fix0.030.01018CVE-2016-9865
9phpMyAdmin Username sql injection7.57.3$5k-$25k$0-$5kNot DefinedOfficial Fix0.000.00950CVE-2016-9864
10WordPress Media Attachment media-upload.php access control5.45.2$5k-$25k$0-$5kNot DefinedOfficial Fix0.000.01055CVE-2012-6634
11WordPress press-this.php Security Bypass access control4.33.8$5k-$25k$0-$5kUnprovenOfficial Fix0.030.01055CVE-2011-5270
12PHP PCRE memory corruption7.37.0$25k-$100k$0-$5kNot DefinedOfficial Fix0.030.00000
13WordPress information disclosure4.34.1$5k-$25k$0-$5kNot DefinedOfficial Fix0.040.01213CVE-2013-2202
14Plone Session BrowserIdManager.py Reflected cross site scripting6.25.6$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.040.01319CVE-2013-7062
15PunBB admin_options.php unknown vulnerability4.24.0$0-$5k$0-$5kNot DefinedOfficial Fix0.060.06739CVE-2006-4759
16lighttpd request.c http_request_split_value resource management7.56.7$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.020.12955CVE-2012-5533

IOC - Indicator of Compromise (1)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP addressHostnameActorCampaignsTypeConfidence
131.192.107.187TokyoXverifiedHigh

TTP - Tactics, Techniques, Procedures (5)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueVulnerabilitiesAccess VectorTypeConfidence
1T1055CWE-74InjectionpredictiveHigh
2TXXXX.XXXCWE-XX, CWE-XXXxxxx Xxxx XxxxxxxxxpredictiveHigh
3TXXXXCWE-XXX, CWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveHigh
4TXXXXCWE-XXXxx XxxxxxxxxpredictiveHigh
5TXXXXCWE-XXXXxxxxxxxxxxxxpredictiveHigh

IOA - Indicator of Attack (11)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClassIndicatorTypeConfidence
1File/manager/index.phppredictiveHigh
2Fileadmin_options.phppredictiveHigh
3Filexxxxxxxxxxxxxxxx.xxpredictiveHigh
4Filexxxxx-xxxx.xxxpredictiveHigh
5Filexxx/xxxxxxx.xpredictiveHigh
6Filexx-xxxxx/xxxxx-xxxxxx.xxxpredictiveHigh
7Libraryxxxxxxxx.xxxpredictiveMedium
8Argumentxxxxxxx_xxxpredictiveMedium
9Argumentxxxxxxx_xx_xxxxxxxpredictiveHigh
10Argumentxxx_xxxpredictiveLow
11Argumentxxxx_xxpredictiveLow

References (2)

The following list contains external sources which discuss the actor and the associated activities:

Do you need the next level of professionalism?

Upgrade your account now!