BlankSlate Análisis

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (127)

Idioma

en	102
fr	8
de	6
it	6
ru	4

País

gb	70
us	20
fr	8
it	6
de	4

Actores

BlankSlate	4
Ave Maria	1
Cerber	1

Interesar

Escribe

Not Defined	72
WordPress Plugin	10
Anti-Malware Software	4
Router Operating System	2
Software Library	2

Proveedor

Not Defined	34
SourceCodester	16
Campcodes	6
Zillya!	4
Wondershare	4

Producto

Zillya! Antivirus	4
SourceCodester Engineers Online Portal	4
Kashipara Food Management System	4
Campcodes Simple Student Information System	4
Dasan GPON ONT WiFi Router H640X	2

Vulnerabilidad

#	Vulnerabilidad	Base	Temp	0day	Hoy	Exp	Con	EPSS	CTI	CVE
1	DZCP deV!L`z Clanportal config.php escalada de privilegios	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	1.28	CVE-2010-0966
2	JetBrains PhpStorm idea.log divulgación de información	3.8	3.7	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00043	0.04	CVE-2022-48435
3	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash divulgación de información	5.3	5.2	$5k-$25k	$0-$5k	High	Workaround	0.02016	0.02	CVE-2007-1192
4	All in One SEO Pack Plugin cross site scripting	5.1	5.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00076	0.07	CVE-2023-0586
5	PHPGurukul Online Notes Sharing System profile.php cross site request forgery	4.3	4.1	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00052	0.08	CVE-2023-7052
6	Views for WPForms Plugin create_view cross site request forgery	4.3	4.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00052	0.08	CVE-2024-0374
7	All in One SEO Pack Plugin cross site scripting	3.9	3.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00101	0.00	CVE-2023-0585
8	SourceCodester Responsive Ordering System Product_model.php escalada de privilegios	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00632	0.03	CVE-2021-25206
9	WPForms Pro Plugin escalada de privilegios	7.6	7.5	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00229	0.04	CVE-2022-3574
10	Wondershare Dr.Fone escalada de privilegios	7.0	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00082	0.00	CVE-2023-29835
11	Netentsec NS-ASG Application Security Gateway list_addr_fwresource_ip.php sql injection	5.5	5.4	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00061	0.04	CVE-2023-5681
12	Campcodes Simple Student Information System manage_academic.php sql injection	6.2	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00064	0.04	CVE-2023-5929
13	Campcodes Simple Student Information System index.php sql injection	6.2	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00064	0.04	CVE-2023-5923
14	CodeAstro Internet Banking System pages_reset_pwd.php cross site scripting	4.4	4.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00052	0.04	CVE-2023-5695
15	SourceCodester Engineers Online Portal downloadable_student.php sql injection	7.5	7.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00077	0.08	CVE-2023-5276
16	ZZZCMS Database Backup File save.php restore escalada de privilegios	7.1	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00061	0.00	CVE-2023-5263
17	MicroWorld eScan Anti-Virus runasroot Local Privilege Escalation	7.8	7.6	$5k-$25k	$0-$5k	Proof-of-Concept	Not Defined	0.00042	0.04	CVE-2023-4383
18	Lightxun IPTV Gateway web_upload_template.html escalada de privilegios	5.0	4.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00063	0.04	CVE-2023-7026
19	SourceCodester Best Courier Management System manage_parcel_status.php cross site scripting	4.1	4.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00050	0.04	CVE-2023-5273
20	7-card Fakabao wxpay_notify.php sql injection	6.6	6.4	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00064	0.08	CVE-2023-7185

IOC - Indicator of Compromise (9)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	dirección IP	Hostname	Actor	Identified	Escribe	Confianza
1	19.48.17.0		BlankSlate	2022-04-01	verified	Alto
2	54.68.27.226	ec2-54-68-27-226.us-west-2.compute.amazonaws.com	BlankSlate	2022-04-01	verified	Medio
3	XX.XX.XX.X	xxxxxxx-xxx-xxx-xxx-xxx.xx.xx.xxxx.xxxxxxxxxx.xx	Xxxxxxxxxx	2022-04-01	verified	Alto
4	XX.XX.XXX.X	xxx.xx-xx-xx-xxx.xx	Xxxxxxxxxx	2022-04-01	verified	Alto
5	XXX.XX.XXX.XX		Xxxxxxxxxx	2022-04-01	verified	Alto
6	XXX.XXX.X.XXX	xxx.x.xxx.xxx.xx.xxxxxxxxxxxxxxxxx.xxx	Xxxxxxxxxx	2022-04-01	verified	Medio
7	XXX.XXX.XXX.X	xxx.xxxx.xxx.xxxx.xxxxxxx	Xxxxxxxxxx	2022-04-01	verified	Alto
8	XXX.XXX.XXX.X	xxx.xx-xxx-xxx-xxx.xx	Xxxxxxxxxx	2022-04-01	verified	Alto
9	XXX.XXX.XXX.X		Xxxxxxxxxx	2022-04-01	verified	Alto

TTP - Tactics, Techniques, Procedures (14)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Vulnerabilidad	Vector de acceso	Escribe	Confianza
1	T1006	CWE-22, CWE-24	Path Traversal	predictive	Alto
2	T1040	CWE-294	Authentication Bypass by Capture-replay	predictive	Alto
3	T1055	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	Alto
4	TXXXX	CWE-XX	Xxxxxxxx Xxxxxxxxx	predictive	Alto
5	TXXXX.XXX	CWE-XX, CWE-XX	Xxxxx Xxxx Xxxxxxxxx	predictive	Alto
6	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	Alto
7	TXXXX	CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	Alto
8	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	Alto
9	TXXXX	CWE-XX	Xxx Xxxxxxxxx	predictive	Alto
10	TXXXX	CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	Alto
11	TXXXX	CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	Alto
12	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	Alto
13	TXXXX.XXX	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	Alto
14	TXXXX.XXX	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	Alto

IOA - Indicator of Attack (119)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Clase	Indicator	Escribe	Confianza
1	File	/admin/index.php	predictive	Alto
2	File	/admin/list_addr_fwresource_ip.php	predictive	Alto
3	File	/admin/makehtml_freelist_action.php	predictive	Alto
4	File	/admin/return_add.php	predictive	Alto
5	File	/admin/save.php	predictive	Alto
6	File	/admin/service/stop/	predictive	Alto
7	File	/admin/students/manage_academic.php	predictive	Alto
8	File	/api/v1/attack/falco	predictive	Alto
9	File	/application/websocket/controller/Setting.php	predictive	Alto
10	File	/cgi-bin/cstecgi.cgi	predictive	Alto
11	File	/cgi-bin/login_action.cgi	predictive	Alto
12	File	/event/admin/?page=user/list	predictive	Alto
13	File	/include/file.php	predictive	Alto
14	File	/index.php	predictive	Medio
15	File	/index.php?menu=asterisk_cli	predictive	Alto
16	File	/xxxx/xxxxx/xxxxxx	predictive	Alto
17	File	/xxxxxxxxxxxxxxx	predictive	Alto
18	File	/xxxxxxxx/xxxx	predictive	Alto
19	File	/xxxxxxx/	predictive	Medio
20	File	/xxxx/xxxxxxx.xxx	predictive	Alto
21	File	/xxxxxxxxxx.xxx	predictive	Alto
22	File	/xxxxxx/xxxxx.xxx/xxxxx/xxxxx/xxx_xxxxxx_xxxxxxxx.xxxx	predictive	Alto
23	File	xxxxxxxxxxxx.xxx	predictive	Alto
24	File	xxxxx/xxx_xxxxxxxx.xxx	predictive	Alto
25	File	xxxxx/xxxxxxxxxx/xxxxxxx.xxx	predictive	Alto
26	File	xxx/xxxxxx/xxxxxx.xxx	predictive	Alto
27	File	xxx/xxxxx/xxxxxxxxxx/xxxx.xxx	predictive	Alto
28	File	xxx/xxxx/xxxxx/xxxx.xxx	predictive	Alto
29	File	xxxxxxx.xxx	predictive	Medio
30	File	xxxxxxx.xxx	predictive	Medio
31	File	xxxxxxx.xxx	predictive	Medio
32	File	xxxxxx-xxxxxxx.xxx	predictive	Alto
33	File	xxxxxxxxxx.xxx	predictive	Alto
34	File	xxxxxxxx_xxxxxxx.xxx	predictive	Alto
35	File	xxxx/xx-xxxxxxx.xxx	predictive	Alto
36	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	Alto
37	File	xxxxxxx.xxx	predictive	Medio
38	File	xxxxxxxxxxxx_xxxxxxx.xxx	predictive	Alto
39	File	xxxxxx_xxxxx_xxxxxxxx.xxx	predictive	Alto
40	File	xxxxxxx/xxxx-xxxxx-xxxxxx.xxx	predictive	Alto
41	File	xxxxxxx/xxxx-xxxxx-xxxxxx.xxx?xxxxxx=x	predictive	Alto
42	File	xxxx.xxx	predictive	Medio
43	File	xxx/xxxxxxx/xxxxxxxxxxxxxx.x	predictive	Alto
44	File	xxxxxxxx/xxxxx.xxx	predictive	Alto
45	File	xxxx.xxx	predictive	Medio
46	File	xxx/xxxxxx.xxx	predictive	Alto
47	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	Alto
48	File	xxxxx.xxx	predictive	Medio
49	File	xx/xxxxxxx.x	predictive	Medio
50	File	xxxxx/xxxx.xxx	predictive	Alto
51	File	xxxx_xxxx_xxxxxx.xxx	predictive	Alto
52	File	xxx.x/xxxxxx.x	predictive	Alto
53	File	xxxxxx/xxx/xxxxxxxxxxx/xxxx_xxxxxxxxxx.xx	predictive	Alto
54	File	xxxxxxxxxx.xxx	predictive	Alto
55	File	xxxxxx_xxxxxx_xxxxxx.xxx	predictive	Alto
56	File	xxxxxxxxxxx_xxxxx_xxxxxxxx.xxx	predictive	Alto
57	File	xxxxxxxxx.xxx	predictive	Alto
58	File	xxxxx_xxxxx_xxx.xxx	predictive	Alto
59	File	xxxxxxx.xxx	predictive	Medio
60	File	xxxxxxx/xxxxxx-xxxxxxx-xxxx-xxxx.xxxx	predictive	Alto
61	File	xxxxxxx_xxxxx.xxx	predictive	Alto
62	File	xxxxxxxx_xxxxx_xxxxxxxx.xxx	predictive	Alto
63	File	xxxxxxxxx/xxxx/xxxxxxxxx.xxx	predictive	Alto
64	File	xxxx/xxxx/	predictive	Medio
65	File	xxxxxxxxx	predictive	Medio
66	File	xxxx/xxxxx_xxxxxx.xxx	predictive	Alto
67	File	xxxxxx_xxxxxxx.xxx	predictive	Alto
68	File	xxx/xxxxxxxxx/xxxxxxxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxx.xxx	predictive	Alto
69	File	xxxxxx_xxx_xxxxx_xxx.xxx	predictive	Alto
70	File	xxxxxxxx/xxxxx/xxx_xxx.xxx	predictive	Alto
71	File	xxxx_x_xxxx.xxx	predictive	Alto
72	File	xxxxx/xxxx_xxxx.xxx	predictive	Alto
73	Library	xxx.xxx	predictive	Bajo
74	Argument	$xxxx["xx"]	predictive	Medio
75	Argument	$_xxxxxx['xxx_xxxx']	predictive	Alto
76	Argument	$_xxxxxx['xxxxxx_xxxx']	predictive	Alto
77	Argument	xxxxxx	predictive	Bajo
78	Argument	xxxxxx	predictive	Bajo
79	Argument	xxxxxxxx	predictive	Medio
80	Argument	xxxxxxx	predictive	Bajo
81	Argument	xxxxxxxxxxxxxx	predictive	Alto
82	Argument	x_xxxxxx	predictive	Medio
83	Argument	xxxxxxxxxxx	predictive	Medio
84	Argument	xxx_xxxx	predictive	Medio
85	Argument	xxxxxxxx	predictive	Medio
86	Argument	xxxxxx	predictive	Bajo
87	Argument	xxxxxxxxxxxx	predictive	Medio
88	Argument	xxxxx	predictive	Bajo
89	Argument	xxxxx/xxxxxxx/xxx/xx	predictive	Alto
90	Argument	xxxxx_xxxxxxx	predictive	Alto
91	Argument	xxxxx	predictive	Bajo
92	Argument	xxxx	predictive	Bajo
93	Argument	xxxxx xxxx/xxxx xxxx	predictive	Alto
94	Argument	xxxxx	predictive	Bajo
95	Argument	xxxx_xxxx	predictive	Medio
96	Argument	xx	predictive	Bajo
97	Argument	xxx_xxx_xxxxx	predictive	Alto
98	Argument	xxxxxx	predictive	Bajo
99	Argument	xxxx	predictive	Bajo
100	Argument	xxxx	predictive	Bajo
101	Argument	xxxxxxxx	predictive	Medio
102	Argument	xxx_xxxxx_xx	predictive	Medio
103	Argument	xxxxxxxxxx/xxxx/xxxxxxxx/xxxx/xxxxxxx_xxxx	predictive	Alto
104	Argument	xxxxxxxx	predictive	Medio
105	Argument	xxxxxxxx	predictive	Medio
106	Argument	xxxx_xxxx	predictive	Medio
107	Argument	xxxxxxx	predictive	Bajo
108	Argument	xxxxxxx	predictive	Bajo
109	Argument	xxx	predictive	Bajo
110	Argument	xxxxxxx	predictive	Bajo
111	Argument	xxxxxxx	predictive	Bajo
112	Argument	xxxx_xxxx	predictive	Medio
113	Argument	x_xxxx/x_xxxx	predictive	Alto
114	Argument	xxx	predictive	Bajo
115	Argument	xxxxxxxx/xxxxxxxx	predictive	Alto
116	Input Value	(xxxxxxxxx(xxxx,xxxxxx(xxxx,xxxxxxxxxxxx,(xxxxxx (xxx(xxxx=xxxx,x))),xxxxxxxxxxxx),xxxx))	predictive	Alto
117	Input Value	<xxxxxx>xxxxx(xxxxxxxx.xxxxxx)</xxxxxx>	predictive	Alto
118	Input Value	xxxxxxx%xxxxxxxxx.xxx'%xx%xx<xxxxxx%xx>xxxxx(xxxx)</xxxxxx>	predictive	Alto
119	Network Port	xxx/xx (xxx)	predictive	Medio

Referencias (3)

The following list contains external sources which discuss the actor and the associated activities:

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you know our Splunk app?

Download it now for free!