Nansh0u Analyse

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (36)

Sprache

en	26
fr	2
es	2
sv	2
ko	2

Land

us	22
tr	2
fr	2
sv	2

Akteure

Nansh0u	2

Interesse

Typ

Not Defined	12
Network Management Software	4
Operating System	4
WordPress Plugin	2
Multimedia Player Software	2

Hersteller

Thomson	2
Not Defined	2
Apache	2
Sun	2
Accellion	2

Produkt

Thomson TWC305	2
Thomson TWC315	2
Thomson TCW690	2
Void Contact Form 7 Widget for Elementor Page Bui ...	2
Apache Hadoop	2

Schwachstellen

#	Schwachstelle	Base	Temp	0day	Heute	Aus	Mas	CTI	EPSS	CVE
1	Tiki Wiki CMS Groupware tiki-edit_wiki_section.php Cross Site Scripting	5.2	5.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.09	0.00110	CVE-2010-4240
2	Responsive Menus Configuration Setting responsive_menus.module responsive_menus_admin_form_submit Cross Site Scripting	3.2	3.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	0.00073	CVE-2018-25085
3	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash Information Disclosure	5.3	5.2	$5k-$25k	$0-$5k	High	Workaround	0.02	0.02016	CVE-2007-1192
4	SPIP spip.php Cross Site Scripting	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.29	0.00132	CVE-2022-28959
5	ZKTeco ZKBio ECO ADMS Cross Site Scripting	3.5	3.5	$0-$5k	$0-$5k	Not Defined	Not Defined	0.02	0.00056	CVE-2022-44213
6	SourceCodester Canteen Management System categories.php builtin_echo Cross Site Scripting	4.4	4.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.03	0.00059	CVE-2022-4252
7	Tiki Admin Password tiki-login.php schwache Authentisierung	8.0	7.7	$0-$5k	$0-$5k	Not Defined	Official Fix	3.24	0.00936	CVE-2020-15906
8	SourceCodester Employee and Visitor Gate Pass Logging System GET Parameter view_designation.php SQL Injection	7.1	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.06	0.00135	CVE-2023-2090
9	Thomson TWC305/TWC315/TCW690 HTTP Server Pufferüberlauf	5.3	5.0	$0-$5k	Wird berechnet	Proof-of-Concept	Not Defined	0.08	0.06133	CVE-2003-1085
10	Void Contact Form 7 Widget for Elementor Page Builder Plugin void_cf7_opt_in_user_data_track Cross Site Request Forgery	4.3	4.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	0.00062	CVE-2022-47166
11	CropImage component admin.cropcanvas.php erweiterte Rechte	7.3	6.4	$0-$5k	Wird berechnet	Proof-of-Concept	Unavailable	0.05	0.08563	CVE-2006-4363
12	Andreas Robertz PHPNews erweiterte Rechte	7.3	6.4	$0-$5k	$0-$5k	Proof-of-Concept	Unavailable	0.03	0.07128	CVE-2007-4232
13	Metalinks Metacart2 productsbycategory.asp SQL Injection	7.3	7.3	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	0.00142	CVE-2005-1363
14	MGB OpenSource Guestbook email.php SQL Injection	7.3	7.3	$0-$5k	$0-$5k	High	Unavailable	0.55	0.01302	CVE-2007-0354
15	PhotoPost PHP Pro zipndownload.php erweiterte Rechte	7.3	6.4	$0-$5k	$0-$5k	Unproven	Official Fix	0.02	0.05109	CVE-2006-4828
16	Joomla CMS com_easyblog SQL Injection	6.3	6.1	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.43	0.00000
17	InHand InRouter 302/InRouter 615 MQTT schwache Verschlüsselung	9.5	9.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	0.00135	CVE-2023-22601
18	Oracle Communications Cloud Native Core Security Edge Protection Proxy SEPP erweiterte Rechte	10.0	9.7	$100k und mehr	$5k-$25k	Not Defined	Official Fix	0.00	0.97492	CVE-2022-22947
19	CentOS-WebPanel.com CentOS Web Panel Domain erweiterte Rechte	4.9	4.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	0.00086	CVE-2019-14730
20	Apple Mac OS X Server Wiki Server SQL Injection	5.3	4.6	$5k-$25k	$0-$5k	Unproven	Official Fix	0.06	0.00339	CVE-2015-5911

IOC - Indicator of Compromise (8)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP-Adresse	Hostname	Akteur	Identifiziert	Typ	Akzeptanz
1	102.165.51.80		Nansh0u	13.02.2022	verifiziert	High
2	102.165.51.106		Nansh0u	13.02.2022	verifiziert	High
3	XXX.XXX.XX.XXX	xxx-xxx-xx-xxx-xxxx.xxxxxxxxxxxx.xxx	Xxxxxxx	13.02.2022	verifiziert	High
4	XXX.XXX.XX.XXX	xxx-xxx-xx-xxx-xxxx.xxxxxxxxxxxx.xxx	Xxxxxxx	13.02.2022	verifiziert	High
5	XXX.XX.XXX.XX		Xxxxxxx	13.02.2022	verifiziert	High
6	XXX.XX.XX.XXX		Xxxxxxx	13.02.2022	verifiziert	High
7	XXX.XXX.XXX.XXX	xxx-xxx-xxx-xxx-xxx.xxxxxxx.xxxxxxxx-xxx.xxx	Xxxxxxx	13.02.2022	verifiziert	High
8	XXX.XXX.XXX.XXX		Xxxxxxx	13.02.2022	verifiziert	High

TTP - Tactics, Techniques, Procedures (9)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Schwachstellen	Zugriffsart	Typ	Akzeptanz
1	T1059	CWE-94	Argument Injection	prädiktiv	High
2	T1059.007	CWE-79	Cross Site Scripting	prädiktiv	High
3	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	prädiktiv	High
4	TXXXX.XXX	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	prädiktiv	High
5	TXXXX	CWE-XXX	7xx Xxxxxxxx Xxxxxxxx	prädiktiv	High
6	TXXXX	CWE-XX	Xxx Xxxxxxxxx	prädiktiv	High
7	TXXXX	CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	prädiktiv	High
8	TXXXX	CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	prädiktiv	High
9	TXXXX.XXX	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	prädiktiv	High

IOA - Indicator of Attack (28)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Klasse	Indicator	Typ	Akzeptanz
1	File	/admin/maintenance/view_designation.php	prädiktiv	High
2	File	/spip.php	prädiktiv	Medium
3	File	admin.cropcanvas.php	prädiktiv	High
4	File	categories.php	prädiktiv	High
5	File	xxxx/xxxxxxx.xxx	prädiktiv	High
6	File	xxxxxxxxxx.xxx	prädiktiv	High
7	File	xxxx/xxxxxxxxxxxxxxx.xxx	prädiktiv	High
8	File	xxxxx.xxx	prädiktiv	Medium
9	File	xxxxxxxxxxxxxxxxxx.xxx	prädiktiv	High
10	File	xxxxxxxxxx_xxxxx.xxxxxx	prädiktiv	High
11	File	xxxxxxxx.xx?xxxxxxxxxxxx=xxxxxxxx&xxxx=x-xxxx&xxxxxxxx=xxxxxxxxxx&xx	prädiktiv	High
12	File	xxxx/xxxx/xxxx.xxx	prädiktiv	High
13	File	xxxx-xxxx_xxxx_xxxxxxx.xxx	prädiktiv	High
14	File	xxxx-xxxxx.xxx	prädiktiv	High
15	File	xxxxxxxxxx.xx	prädiktiv	High
16	File	xxxxxxxxxxxx.xxx	prädiktiv	High
17	Library	xxx.xxx	prädiktiv	Low
18	Argument	xxxxxxxxxxxx	prädiktiv	Medium
19	Argument	xxxxxx_xxxxx	prädiktiv	Medium
20	Argument	xxxx	prädiktiv	Low
21	Argument	xx	prädiktiv	Low
22	Argument	xxxxxxxxx	prädiktiv	Medium
23	Argument	xxxxxx	prädiktiv	Low
24	Argument	xxxxxx/xxxxxxx/xxxx_xxxx/xxxxxxx/xxxx	prädiktiv	High
25	Argument	xxxxxxxx	prädiktiv	Medium
26	Argument	xx_xxxx	prädiktiv	Low
27	Argument	xxxx	prädiktiv	Low
28	Input Value	xxxxxxxx	prädiktiv	Medium

Referenzen (2)

The following list contains external sources which discuss the actor and the associated activities:

◂ ZurückÜbersichtWeiter ▸

Interested in the pricing of exploits?

See the underground prices here!