Novter Analiza

IOB - Indicator of Behavior (775)

Oś czasu

Język

pl466
en208
zh60
ru22
de6

Kraj

pl464
cn128
us86
ru26
nl6

Aktorzy

Zajęcia

Wysiłek

Oś czasu

Rodzaj

Sprzedawca

Produkt

Microsoft Windows14
Google Chrome6
Joomla CMS6
AVM FRITZ!Box4
Apache Tomcat4

Luki w zabezpieczeniach

#Słaby punktBaseTemp0dayDzisiajWykPrzEPSSCTICVE
1Hiox India Guest Book gb.php memory corruption7.36.4$0-$5k$0-$5kProof-of-ConceptUnavailable0.071330.00CVE-2007-1998
2Visual Form Builder Plugin privilege escalation6.36.0$0-$5k$0-$5kNot DefinedOfficial Fix0.003070.00CVE-2022-0142
3jax guestbook jax_guestbook.php cross site scripting4.34.2$0-$5k$0-$5kHighUnavailable0.002970.02CVE-2005-4879
4Lars Ellingsen Guestserver guestbook.cgi cross site scripting4.34.3$0-$5k$0-$5kNot DefinedNot Defined0.001690.04CVE-2005-4222
5ASPjar ASPjar Guestbook login.asp sql injection5.35.3$0-$5k$0-$5kNot DefinedNot Defined0.003120.00CVE-2005-0423
6DM Guestbook admin.guestbook.php directory traversal7.36.9$0-$5k$0-$5kProof-of-ConceptNot Defined0.044030.04CVE-2007-5821
7Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash information disclosure5.35.2$5k-$25k$0-$5kHighWorkaround0.020160.02CVE-2007-1192
8Qt-cute QuickTalk guestbook qtg_msg_view.php sql injection7.37.1$0-$5k$0-$5kHighUnavailable0.002690.00CVE-2007-3538
9Professional Home Page Tools Professional Home Page Tools Guestbook delcookie.php nieznana luka5.34.6$0-$5k$0-$5kUnprovenOfficial Fix0.003810.00CVE-2006-3837
10XAMPP Apache Distribution cds.php cross site scripting4.34.1$0-$5k$0-$5kNot DefinedOfficial Fix0.002300.00CVE-2005-1077
11Papoo guestbook.php sql injection6.36.0$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.03
12AN Guestbook sign1.php cross site scripting4.34.1$0-$5k$0-$5kHighOfficial Fix0.002540.03CVE-2009-0424
13FAC Guestbook information disclosure9.89.5$0-$5k$0-$5kHighUnavailable0.010730.00CVE-2007-2101
14AFGB AFGB GUESTBOOK add.php privilege escalation7.36.7$0-$5k$0-$5kProof-of-ConceptUnavailable0.185560.00CVE-2006-5307
15SignKorn Guestbook preview.php privilege escalation5.35.3$0-$5k$0-$5kNot DefinedNot Defined0.000000.00
16episodex episodex guestbook default.asp cross site scripting4.34.3$0-$5k$0-$5kNot DefinedNot Defined0.001970.00CVE-2005-1684
17Planetmoon Guestbook passwd.txt Password privilege escalation5.35.3$0-$5k$0-$5kNot DefinedNot Defined0.017840.00CVE-2003-1541
18MPM Guestbook cross site scripting4.34.3$0-$5k$0-$5kNot DefinedNot Defined0.007020.02CVE-2003-1182
19MPC SoftWeb Guestbook insertguest.asp cross site scripting4.34.3$0-$5k$0-$5kNot DefinedNot Defined0.000000.00
20Big Sam Guestbook bigsam_guestbook.php denial of service3.33.2$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.00

IOC - Indicator of Compromise (68)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDadres IPHostnameAktorKampanieIdentifiedRodzajPewność siebie
11.88.24.27Novter2022-02-19verifiedWysoki
22.58.80.150Novter2022-02-19verifiedWysoki
32.196.217.25Novter2022-02-19verifiedWysoki
43.128.83.132ec2-3-128-83-132.us-east-2.compute.amazonaws.comNovter2022-02-19verifiedMedium
55.61.40.95Novter2022-02-19verifiedWysoki
65.61.42.103Novter2022-02-19verifiedWysoki
75.61.42.111box.invfx.euNovter2022-02-19verifiedWysoki
85.61.42.116Novter2022-02-19verifiedWysoki
95.61.48.155Novter2022-02-19verifiedWysoki
105.61.48.156192.64.119.156Novter2022-02-19verifiedWysoki
116.217.158.104Novter2022-02-19verifiedWysoki
127.130.244.4Novter2022-02-19verifiedWysoki
1313.158.242.227Novter2022-02-19verifiedWysoki
1420.56.162.154Novter2022-02-19verifiedWysoki
15XX.XX.XXX.XXXxxxxx2022-02-19verifiedWysoki
16XX.XXX.XX.XXXxxxxx2022-02-19verifiedWysoki
17XX.XXX.XX.XXXXxxxxx2022-02-19verifiedWysoki
18XX.XXX.XXX.XXXXxxxxx2022-02-19verifiedWysoki
19XX.XX.XX.XXXxxx.xx.xx.xx.xx.xxxxxxxxxxxxxxxxx.xxxXxxxxx2022-02-19verifiedMedium
20XX.X.XXX.XXXXxxxxx2022-02-19verifiedWysoki
21XX.XXX.X.XXxxxxxxxxxxx.xxxXxxxxx2022-02-19verifiedWysoki
22XX.XXX.XX.XXXxxxxx2022-02-19verifiedWysoki
23XX.XX.XXX.XXXxxxxx2022-02-19verifiedWysoki
24XX.XXX.XXX.XXXxxxxx2022-02-19verifiedWysoki
25XX.XXX.X.XXXxxxxx2022-02-19verifiedWysoki
26XX.XX.XX.XXXxx-xx-xx-xxx-xxxxxx.xxx.xxxxxxxxxxxxxxx.xxxXxxxxx2022-02-19verifiedWysoki
27XX.XX.XX.XXXXxxxxx2022-02-19verifiedWysoki
28XX.XXX.XXX.XXXxx-xxx-xxx-xxx.xxxxxxxxxx.xxxxxx.xxxxxxxxx.xxxXxxxxx2022-02-19verifiedWysoki
29XX.XXX.XXX.XXXXxxxxx2022-02-19verifiedWysoki
30XX.XX.XX.XXXxxxxx2022-02-19verifiedWysoki
31XX.XX.XXX.XXx-xx-xx-xxx-xx.xxxx.xx.xxxxxxx.xxxXxxxxx2022-02-19verifiedWysoki
32XX.XX.XXX.XXXxxxxxxxxxxx-xxx-x-xx-xxx.xxx-xx.xxx.xxxxxxx.xxXxxxxx2022-02-19verifiedWysoki
33XX.XX.XXX.Xxxxxx-xx-xxx-x.xxxxx.xxx-xxx.xxXxxxxx2022-02-19verifiedWysoki
34XX.XXX.XX.XXxxxxxxxxxx.xxxXxxxxx2022-02-19verifiedWysoki
35XX.XXX.XX.XXxxxxxxxxxx.xxxXxxxxx2022-02-19verifiedWysoki
36XX.XXX.XX.XXxxxx.xxxxxxxxxxxxx.xxxXxxxxx2022-02-19verifiedWysoki
37XX.XX.XXX.XXXxxxx-xxx-xxx-xxx-xxx.xxx.xxx.xxxxx.xxxxxxxx-xx.xxXxxxxx2022-02-19verifiedWysoki
38XX.XX.X.XXXXxxxxx2022-02-19verifiedWysoki
39XXX.XX.XXX.XXxxxx-xxx-xx-xxx-xx.xxxxxx.xxxx.xxxxxxx.xxxXxxxxx2022-02-19verifiedWysoki
40XXX.XXX.X.XXXxxxxx2022-02-19verifiedWysoki
41XXX.XXX.XX.XXxxxxxxxxxxxxxxxxxxxx.xxxxx.xxxXxxxxx2022-02-19verifiedWysoki
42XXX.XXX.XXX.XXxxxxxxxxxxxxxxxxxxxx.xxxxx.xxxXxxxxx2022-02-19verifiedWysoki
43XXX.XX.XXX.XXXXxxxxx2022-02-19verifiedWysoki
44XXX.XXX.XX.XXXXxxxxx2022-02-19verifiedWysoki
45XXX.XXX.XX.XXXxxxxx2022-02-19verifiedWysoki
46XXX.XXX.XX.XXXXxxxxx2022-02-19verifiedWysoki
47XXX.XXX.XXX.XXXXxxxxx2022-02-19verifiedWysoki
48XXX.XX.XX.XXxxxx-xxx-xxx.xx-xxxxxxxx.xxXxxxxx2022-02-19verifiedWysoki
49XXX.XXX.XXX.XXXXxxxxx2022-02-19verifiedWysoki
50XXX.XX.X.XXXXxxxxx2022-02-19verifiedWysoki
51XXX.XX.XX.XXxxxxx2022-02-19verifiedWysoki
52XXX.XXX.XXX.XXXxxx-xxx-xxx-xxx.xxxxxxxxxx.xxxxxx.xxx.xxXxxxxx2022-02-19verifiedWysoki
53XXX.XX.XXX.XXXXxxxxx2022-02-19verifiedWysoki
54XXX.XXX.XXX.XXXxxxxx2022-02-19verifiedWysoki
55XXX.XX.XX.XXXXxxxxx2022-02-19verifiedWysoki
56XXX.XXX.XX.XXxx-xx-xxx-xxx.xxxxxxx.xxx.xxXxxxxx2022-02-19verifiedWysoki
57XXX.XX.XXX.XXXXxxxxx2022-02-19verifiedWysoki
58XXX.X.XXX.XXXxxxxxxxxx.xxxx-xxxxx.xxXxxxxx2022-02-19verifiedWysoki
59XXX.XXX.XXX.XXxxxxxx.xxxxxxxxxx.xxxXxxxxx2022-02-19verifiedWysoki
60XXX.XX.XXX.XXXXxxxxx2022-02-19verifiedWysoki
61XXX.XX.XXX.XXXXxxxxx2022-02-19verifiedWysoki
62XXX.XXX.XXX.XXXxxxxx2022-02-19verifiedWysoki
63XXX.XX.XXX.XXXXxxxxx2022-02-19verifiedWysoki
64XXX.XXX.XX.XXXxxx.xx.xxx.xxx.xxxxx.xx.xx.xxxxxxx.xxxxxxx.xxx.xxXxxxxx2022-02-19verifiedWysoki
65XXX.XXX.XXX.XXXXxxxxx2022-02-19verifiedWysoki
66XXX.XX.XX.XXXxxxxx2022-02-19verifiedWysoki
67XXX.XX.XX.XXxxxxx2022-02-19verifiedWysoki
68XXX.XXX.XXX.XXXXxxxxx2022-02-19verifiedWysoki

TTP - Tactics, Techniques, Procedures (18)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (196)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDKlasaIndicatorRodzajPewność siebie
1File.htaccesspredictiveMedium
2File/adfs/lspredictiveMedium
3File/carbon/mediation_secure_vault/properties/ajaxprocessor.jsppredictiveWysoki
4File/cgi-bin/wlogin.cgipredictiveWysoki
5File/fos/admin/index.php?page=menupredictiveWysoki
6File/getcfg.phppredictiveMedium
7File/Home/debit_credit_ppredictiveWysoki
8File/index.php/weblinks-categoriespredictiveWysoki
9File/iwguestbook/admin/messages_edit.asppredictiveWysoki
10File/login/index.phppredictiveWysoki
11File/odfs/classes/Master.php?f=delete_teampredictiveWysoki
12File/public/plugins/predictiveWysoki
13File/scripts/iisadmin/bdir.htrpredictiveWysoki
14File/usr/bin/pkexecpredictiveWysoki
15File/wp-content/plugins/updraftplus/admin.phppredictiveWysoki
16Fileadd.phppredictiveNiski
17Fileadmin.cgi/config.cgipredictiveWysoki
18Fileadmin.phppredictiveMedium
19Fileadmin/admin.guestbook.phppredictiveWysoki
20Fileadmin/auth.phppredictiveWysoki
21Fileadmin/backupdb.phppredictiveWysoki
22Fileadmin/login.asppredictiveWysoki
23Fileadmin/preview.phppredictiveWysoki
24Fileadministrator/components/com_media/helpers/media.phppredictiveWysoki
25Filexxxxxxx_xxxx_xxxxxxx_xxxxxx_xxx.xpredictiveWysoki
26Filexxxx.xxpredictiveNiski
27Filexxxxxxxxxxxx.xxxpredictiveWysoki
28Filexxxx/xxxx_xxx.xxxpredictiveWysoki
29Filexxxxxx_xxxxxxxxx.xxxpredictiveWysoki
30Filexxxxxx/xxxxxxx/xxxx/xxxxxxx/xxxxxxx/xxxx_xxxxxxx.xxxpredictiveWysoki
31Filexxx.xxxpredictiveNiski
32Filexxxxxxx.xxxxpredictiveMedium
33Filexxx-xxx/xxxxxpredictiveWysoki
34Filexxxxxxxxxxxxxxxx.xxxpredictiveWysoki
35Filexxxxxxx/xxxxxxxxxx.xxxpredictiveWysoki
36Filexxxxxxx/xxxx/xxxxxx/xxxxxx.xpredictiveWysoki
37Filexxxxx-xxxxxxx.xxxpredictiveWysoki
38Filex_xxxxxxpredictiveMedium
39Filexxxx/xxxxxxxxxxxxxxx.xxxpredictiveWysoki
40Filexx/xx.xxxpredictiveMedium
41Filexxxxxxxxxx.xpredictiveMedium
42Filexxxxxxx.xxxpredictiveMedium
43Filexxxxxxxxx.xxxpredictiveWysoki
44Filexxxxxxx/xxx/xxx/xxxxx.xpredictiveWysoki
45Filexxxx.xxxpredictiveMedium
46Filexxxxx.xxxpredictiveMedium
47Filexxx/xxxx/xxxx.xpredictiveWysoki
48Filexxxxxxx.xxxpredictiveMedium
49Filexxxxx/xxxxxx.xxxpredictiveWysoki
50Filexxxx_xxxxxx_xxxxxxx.xxxpredictiveWysoki
51Filexx_xxxxxxxpredictiveMedium
52Filexxxxx/xxxxx_xxxxx_xpredictiveWysoki
53Filexxxxxxxx/xxxxxxx/xxxxxxxxxxxx.xxxpredictiveWysoki
54Filexx.xxxpredictiveNiski
55Filexxxxx.xxxpredictiveMedium
56Filexxxxxx/xxxxxxxxpredictiveWysoki
57Filexxxx_xxxxxxx.xxx.xxxpredictiveWysoki
58Filexxxxxxxxxxxxxxxxxxxxxxxxx.xxxxxpredictiveWysoki
59Filexxxxxxxxx.xxxpredictiveWysoki
60Filexxxxxxxxx.xxxpredictiveWysoki
61Filexxxxxxxxx/xxxxxxxxx.xxx.xxxpredictiveWysoki
62Filexxxxxxxxxxxx.xxxpredictiveWysoki
63Filexxxxxxxxx.xxxpredictiveWysoki
64Filexxxx/xx/xxxxxxxxxx.xxxpredictiveWysoki
65Filexxxxxxxx.xxxpredictiveMedium
66Filexxxxxxxxx.xxpredictiveMedium
67Filexxx/xxxxxx.xxxpredictiveWysoki
68Filexxx/xxxxxxxxxxx/xxxxxxx.xxxpredictiveWysoki
69Filexxxxxxx/xxxxxxx/xxxxxxxx_xxxxxxxx.xxx.xxxpredictiveWysoki
70Filexxxxxxxx/xxxxxxxxx.xxxxx.xxxpredictiveWysoki
71Filexxxxxxxx/xxxxxx/xxxx/xxxxx.xxx.xxxpredictiveWysoki
72Filexxxxx.xxxpredictiveMedium
73Filexxxxxxxxxxx.xxxpredictiveWysoki
74Filexxxxxxxx/xxx_xxxx_xxxx.xpredictiveWysoki
75Filexxx/xxxxxxxx.xxxpredictiveWysoki
76Filexxx_xxxxxxxxx.xxxpredictiveWysoki
77Filexxx.x/xxxxxx.xpredictiveWysoki
78Filexxx.xpredictiveNiski
79Filexxxxxxxxxxxxxxxxxxxx.xxxxpredictiveWysoki
80Filexxxxx.xxxpredictiveMedium
81Filexxx_xxxxxx.xpredictiveMedium
82Filexxxxxxxx_xxxxxx.xxxpredictiveWysoki
83Filexxx/xxxx/xxxxxx.xpredictiveWysoki
84Filexxxxxxx_xxxx.xxxpredictiveWysoki
85Filexxx_xxxx_xxx_xxxxxxxxxx.xpredictiveWysoki
86Filexxx_xxxx.xxxpredictiveMedium
87Filexxxx-xxxx_xxxxxxx.xxpredictiveWysoki
88Filexxxxxxx.xxxpredictiveMedium
89Filexxxxxxxxxxx.xxxpredictiveWysoki
90Filexxxxxxxxxxxx.xxxpredictiveWysoki
91Filexxxxxx.xxxpredictiveMedium
92Filexxxxxxx\xxx_xxxxxx.xxxpredictiveWysoki
93Filexxx_xxx_xxxx.xxxpredictiveWysoki
94Filexx.xxxpredictiveNiski
95Filexxxxxx/xxx/xx/xxx.xxpredictiveWysoki
96Filexxxxxxxxx.xxxxpredictiveWysoki
97Filexxxxxx.xxxpredictiveMedium
98Filexxxx_xxxxx.xxxpredictiveWysoki
99Filexxxxxxxxxxxx.xxxpredictiveWysoki
100Filexxxxxx/xxxxx.xxxpredictiveWysoki
101Filexxxxxxxxx.xxxpredictiveWysoki
102Filexx_xxxxx_xxxx.xxxpredictiveWysoki
103Filexxxx-xxx/predictiveMedium
104Filexxxxx.xxxpredictiveMedium
105Filexxxxxxxx_xxxxxxxxx.xxxpredictiveWysoki
106Filexxxxx.xxxpredictiveMedium
107Filexxxxxx_xxx.xxxpredictiveWysoki
108Filexxxxxxx.xxxxpredictiveMedium
109Filexxxxxx.xxxpredictiveMedium
110Filexxxxxxxxxx.xxxxpredictiveWysoki
111Filexx-xxxxx/xxxx.xxxpredictiveWysoki
112Filexx-xxxxx.xxxpredictiveMedium
113Filexxxxxx.xxxpredictiveMedium
114Filexxxxxxxxxxxxx.xxxpredictiveWysoki
115Library/xxxxx/xxxxxxxx/xxxxxxx.xxxpredictiveWysoki
116Libraryxxx/xxxx/xxxxx.xxxpredictiveWysoki
117Libraryxxxxxx-xx/xxx/xxx-xxxxxx-xxxxx-xx.xxxpredictiveWysoki
118Libraryxxxxxxx.xxx.xx.xxxpredictiveWysoki
119Libraryxxxxxx.xxxpredictiveMedium
120Libraryxxx/xxx/xxxx/predictiveWysoki
121Argumentxx/xxpredictiveNiski
122ArgumentxxxxxxxpredictiveNiski
123ArgumentxxxxxxxxpredictiveMedium
124ArgumentxxxxxpredictiveNiski
125ArgumentxxxxxpredictiveNiski
126ArgumentxxxxxxxxxxxxxpredictiveWysoki
127ArgumentxxxxxxxxpredictiveMedium
128ArgumentxxxpredictiveNiski
129ArgumentxxxxxxxpredictiveNiski
130ArgumentxxxxxxxxxxxxxpredictiveWysoki
131ArgumentxxxxxxpredictiveNiski
132ArgumentxxxxxxxpredictiveNiski
133ArgumentxxxxxxxxpredictiveMedium
134Argumentxxxxxxx_xxxx_xxx_xxxxxxpredictiveWysoki
135ArgumentxxxxxpredictiveNiski
136Argumentxxx_xxxxpredictiveMedium
137ArgumentxxxxxxxpredictiveNiski
138Argumentxxxx_xxxxx_xxxxpredictiveWysoki
139ArgumentxxxxpredictiveNiski
140ArgumentxxxxxxxxpredictiveMedium
141Argumentxx_xxpredictiveNiski
142Argumentxx_xxxxpredictiveNiski
143ArgumentxxpredictiveNiski
144Argumentx_xxxxxxxpredictiveMedium
145ArgumentxxxxpredictiveNiski
146ArgumentxxxxxpredictiveNiski
147ArgumentxxpredictiveNiski
148ArgumentxxxxxpredictiveNiski
149ArgumentxxxxxpredictiveNiski
150ArgumentxxxpredictiveNiski
151Argumentxxx_xxxpredictiveNiski
152ArgumentxxxxxpredictiveNiski
153Argumentxxxxxxx_xxxxpredictiveMedium
154ArgumentxxxxxxpredictiveNiski
155ArgumentxxxpredictiveNiski
156ArgumentxxxxxxpredictiveNiski
157ArgumentxxxxxxxpredictiveNiski
158ArgumentxxxxxxxxxpredictiveMedium
159Argumentxxx_xxpredictiveNiski
160ArgumentxxxxpredictiveNiski
161ArgumentxxxxpredictiveNiski
162Argumentxx_xxpredictiveNiski
163ArgumentxxxxxxpredictiveNiski
164ArgumentxxxxxpredictiveNiski
165ArgumentxxxxpredictiveNiski
166Argumentxxxx[xx]predictiveMedium
167Argumentxxxxx_xxxx_xxxxpredictiveWysoki
168ArgumentxxxxxxpredictiveNiski
169Argumentxxx-xxxxxxpredictiveMedium
170Argumentxxxxxx/xxxxxx_xxxxxxpredictiveWysoki
171Argumentxxxxxx_xxxxxxpredictiveWysoki
172Argumentxxxxxx_xxxxxpredictiveMedium
173Argumentxxxxxx_xxxxpredictiveMedium
174ArgumentxxxxxxxxpredictiveMedium
175ArgumentxxxxpredictiveNiski
176Argumentxxxx_xxpredictiveNiski
177ArgumentxxxpredictiveNiski
178ArgumentxxxxxpredictiveNiski
179ArgumentxxxxxxxpredictiveNiski
180ArgumentxxxxxpredictiveNiski
181ArgumentxxxxxxxxxpredictiveMedium
182ArgumentxxxxxxxxxxxpredictiveMedium
183ArgumentxxxxxxpredictiveNiski
184ArgumentxxxxxxxxpredictiveMedium
185Argumentxxx:xxxxpredictiveMedium
186Argumentxxxxx/xxxxxxpredictiveMedium
187Argumentxxx_xxx_xxxxxxxx_xxxpredictiveWysoki
188Argumentx_xxxxxxxxpredictiveMedium
189Input Valuex%xx%xx%xxxxxxx%xxxxxxxx%xxxxxxxxxx%xxxxxx%xx%xxxxxxx_xxxxx%xx%xx--%xx%xxpredictiveWysoki
190Input Valuex+xxxxx+xxxxxx+x,xxxxxxx,xxxxxxxxxxx+xxxx+xxxxx#predictiveWysoki
191Input Value<?xxx xxxxxx($_xxx['x']); ?>predictiveWysoki
192Input Value??x:\predictiveNiski
193Input Valuexxxx -x xxxxxxxx=xxxxxx.xxxxxxx xxxx://xxx.xxx.x.x/xxxxxx.xxxpredictiveWysoki
194Network Portxxx/xx (xxx)predictiveMedium
195Network Portxxx/xxxxpredictiveMedium
196Network Portxxx xxxxxx xxxxpredictiveWysoki

Referencje (2)

The following list contains external sources which discuss the actor and the associated activities:

Might our Artificial Intelligence support you?

Check our Alexa App!