PowerTrick Analiza

IOB - Indicator of Behavior (1000)

Oś czasu

Język

de622
en360
pl4
es4
ru2

Kraj

de744
es254
us2

Aktorzy

Zajęcia

Wysiłek

Oś czasu

Rodzaj

Sprzedawca

Produkt

Apache HTTP Server26
Google Android22
Google Chrome10
Magento8
Wireshark6

Luki w zabezpieczeniach

#Słaby punktBaseTemp0dayDzisiajWykPrzEPSSCTICVE
1Free GDPR Consent Solution Plugin Admin Dashboard cross site scripting3.53.4$0-$5k$0-$5kNot DefinedOfficial Fix0.001000.00CVE-2022-0147
2Traccar GPS Tracking System LDAP Search Filter LDAP injection privilege escalation7.56.6$0-$5k$0-$5kNot DefinedOfficial Fix0.000480.00CVE-2020-5246
3Unreal UnrealIRCd IP Cloaking Feature cloak.c IP Address information disclosure5.35.1$0-$5k$0-$5kNot DefinedOfficial Fix0.007750.03CVE-2004-0679
4Oracle Secure Backup Apache denial of service7.57.0$5k-$25k$0-$5kHighOfficial Fix0.963850.02CVE-2011-3192
5Symantec ASG/ProxySG FTP Proxy WebFTP Mode Stored cross site scripting5.75.4$5k-$25k$0-$5kNot DefinedOfficial Fix0.001150.00CVE-2018-18370
6versatileBulletinBoard dereferrer.php cross site scripting3.53.3$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.02
7McAfee WebAdvisor Browser Extension Settings privilege escalation6.96.9$5k-$25k$5k-$25kNot DefinedNot Defined0.001500.03CVE-2022-0815
8Hotel Druid SQLite sql injection6.36.1$0-$5k$0-$5kNot DefinedNot Defined0.001860.00CVE-2021-37832
9cURL/libcURL Referer information disclosure4.34.1$0-$5k$0-$5kNot DefinedOfficial Fix0.009270.02CVE-2021-22876
10PostgreSQL sql injection5.65.4$0-$5k$0-$5kNot DefinedOfficial Fix0.001950.02CVE-2021-23214
11Cisco IOS XE H.323 Application Level Gateway privilege escalation4.54.4$25k-$100k$0-$5kNot DefinedOfficial Fix0.001070.00CVE-2021-1616
12Schneider Electric AP7xxxx/AP8xxx/APDU9xxx URL information disclosure4.34.1$0-$5k$0-$5kNot DefinedOfficial Fix0.001040.03CVE-2021-22825
13Cisco IOS XR Ethernet Frame denial of service6.56.2$5k-$25k$0-$5kNot DefinedOfficial Fix0.000510.00CVE-2021-34713
14Technicolor TC7337 Backup File backupsettings.conf Credentials information disclosure6.46.4$0-$5k$0-$5kNot DefinedNot Defined0.004850.02CVE-2020-11449
15PhpWiki ldap.php weak authentication9.88.8$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.015800.00CVE-2007-3193
16QuickBox Pro cross site scripting3.53.5$0-$5k$0-$5kNot DefinedNot Defined0.000780.00CVE-2021-45281
17Mahavitaran App URL Parameter information disclosure4.74.7$0-$5k$0-$5kNot DefinedNot Defined0.001480.00CVE-2020-27414
18Veritas InfoScale Operations Manager GET Parameter listdir.pl cross site scripting3.63.5$0-$5k$0-$5kNot DefinedOfficial Fix0.000540.00CVE-2022-26483
19Apple iOS/iPadOS FaceTime information disclosure7.57.2$25k-$100k$5k-$25kNot DefinedOfficial Fix0.004530.00CVE-2019-8830
20Apache Traffic Server Request Line Parser privilege escalation5.55.3$5k-$25k$0-$5kNot DefinedOfficial Fix0.001550.00CVE-2021-44040

IOC - Indicator of Compromise (2)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDadres IPHostnameAktorKampanieIdentifiedRodzajPewność siebie
15.9.161.246static.246.161.9.5.clients.your-server.dePowerTrick2021-05-31verifiedWysoki
2XXX.XX.XX.XXxxxxxxxx.xx-xxx-xx-xx.xxxXxxxxxxxxx2021-05-31verifiedWysoki

TTP - Tactics, Techniques, Procedures (22)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueKlasaLuki w zabezpieczeniachWektor dostępuRodzajPewność siebie
1T1006CAPEC-126CWE-21, CWE-22Path TraversalpredictiveWysoki
2T1040CAPEC-102CWE-294, CWE-319Authentication Bypass by Capture-replaypredictiveWysoki
3T1055CAPEC-10CWE-74Improper Neutralization of Data within XPath ExpressionspredictiveWysoki
4T1059CAPEC-242CWE-94Argument InjectionpredictiveWysoki
5T1059.007CAPEC-209CWE-79, CWE-80Cross Site ScriptingpredictiveWysoki
6TXXXXCAPEC-122CWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveWysoki
7TXXXX.XXXCAPEC-0CWE-XXXXxx Xx Xxxx-xxxxx XxxxxxxxpredictiveWysoki
8TXXXX.XXXCAPEC-16CWE-XXX, CWE-XXXXxxx-xxxxx XxxxxxxxxxxpredictiveWysoki
9TXXXXCAPEC-136CWE-XX, CWE-XXXxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx XxxxxxxxxpredictiveWysoki
10TXXXX.XXXCAPEC-178CWE-XXXXxxx XxxxxxxxpredictiveWysoki
11TXXXXCAPEC-0CWE-XXX7xx Xxxxxxxx XxxxxxxxpredictiveWysoki
12TXXXXCAPEC-1CWE-XXX, CWE-XXXXxxxxxxxxx XxxxxxpredictiveWysoki
13TXXXXCAPEC-108CWE-XX, CWE-XXXxx XxxxxxxxxpredictiveWysoki
14TXXXX.XXXCAPEC-1CWE-XXXXxxxxxxx XxxxxxxxxxxxxpredictiveWysoki
15TXXXXCAPEC-112CWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxxxx XxxxxxxxxxpredictiveWysoki
16TXXXX.XXXCAPEC-220CWE-XXXXxxxxxxxx XxxxxxxxxpredictiveWysoki
17TXXXX.XXXCAPEC-459CWE-XXXXxxxxxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveWysoki
18TXXXXCAPEC-116CWE-XXX, CWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveWysoki
19TXXXX.XXXCAPEC-0CWE-XXXxxxxxxxxxxxxpredictiveWysoki
20TXXXXCAPEC-157CWE-XXX, CWE-XXXXxxxxxxxxxxxx XxxxxxpredictiveWysoki
21TXXXX.XXXCAPEC-0CWE-XXXXxx Xxxxxxxxxx XxxxxpredictiveWysoki
22TXXXX.XXXCAPEC-1CWE-XXXXxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx XxxxxxxxxpredictiveWysoki

IOA - Indicator of Attack (232)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDKlasaIndicatorRodzajPewność siebie
1File/admin/config.php?display=disa&view=formpredictiveWysoki
2File/apps/acs-commons/content/page-compare.htmlpredictiveWysoki
3File/cgi/get_param.cgipredictiveWysoki
4File/edit-db.phppredictiveMedium
5File/files/passwordpredictiveWysoki
6File/guest_auth/cfg/upLoadCfg.phppredictiveWysoki
7File/hocms/classes/Master.php?f=delete_memberpredictiveWysoki
8File/lists/admin/predictiveWysoki
9File/phppath/phppredictiveMedium
10File/services/getFile.cmdpredictiveWysoki
11File/sns/classes/Master.php?f=delete_imgpredictiveWysoki
12File/usr/bin/pkexecpredictiveWysoki
13File/v2/quantum/save-data-upload-big-filepredictiveWysoki
14File/var/log/messagespredictiveWysoki
15File/web/jquery/uploader/multi_uploadify.phppredictiveWysoki
16File/webconsole/ControllerpredictiveWysoki
17File/wordpress/wp-admin/admin.php?page=weblib-circulation-desk&orderby=title&order=DESCpredictiveWysoki
18Fileabook_database.phppredictiveWysoki
19Fileacl/save_user.cgipredictiveWysoki
20Fileadaptive-images-script.phppredictiveWysoki
21Fileadmin/auth.phppredictiveWysoki
22Fileadmin/cgi-bin/listdir.plpredictiveWysoki
23Fileadminuseredit.php?usertoedit=XSSpredictiveWysoki
24FileAvastSvc.exepredictiveMedium
25Filebackupsettings.confpredictiveWysoki
26Filebase/ErrorHandler.phppredictiveWysoki
27Filexxx/xxxx.xpredictiveMedium
28Filexxxx/xxx/predictiveMedium
29Filexxx-xxx/xxxxx.xxxpredictiveWysoki
30Filexxxx_xxxx.xxxpredictiveWysoki
31Filexxxxx.xpredictiveNiski
32Filexxx.xxxpredictiveNiski
33Filexxx.xxx?xxx=xxxxx_xxxxpredictiveWysoki
34Filexxxxxx/xxxx.xpredictiveWysoki
35Filexxxxxx/xxx.xpredictiveMedium
36Filexxxxxx/xxxx.xpredictiveWysoki
37Filexxxxxx\xxx.xpredictiveMedium
38Filexxx.xxxxx.xxxxxxx.xxxxxxxxxxxxxx.xxx.xxxxxxx.xxxxxxxxxxxxxxxxxxpredictiveWysoki
39Filexxxxxx/xxxxx/xxxxxxx.xpredictiveWysoki
40Filexxxxxxx.xxxpredictiveMedium
41Filexxxxxxx.xxxpredictiveMedium
42Filex_xxxxxxxxxxx.xxxxpredictiveWysoki
43Filexxxxx_xxxxxx.xpredictiveWysoki
44Filexxxxxxxxxxxx.xxxpredictiveWysoki
45Filexxxxxxxxx.xxxpredictiveWysoki
46Filexxxxxxxxxx.xxxpredictiveWysoki
47Filexxxxxxxxxxx.xxxpredictiveWysoki
48Filexxxxxxx/xxx/xxx_xxx.xpredictiveWysoki
49Filexxxxx.xxxpredictiveMedium
50Filexxxx/xxxxxxxxxx/xxxx-xxx.xpredictiveWysoki
51Filexxxx/xxxxxxxxxx/xxxxxx-xxxxxx.xpredictiveWysoki
52Filexxxxxx.xxx.xxxpredictiveWysoki
53Filexxxxxxxxxxxxxx.xxxpredictiveWysoki
54Filexxxxx.xxxxpredictiveMedium
55Filexxxxxxxx.xpredictiveMedium
56Filexxxxxxxxx.xxxpredictiveWysoki
57Filexxxxxxxxxx\xxxxxx\xxxxxxxxxxxxx.xxxpredictiveWysoki
58Filexxxxxx/xxxxx_xxxxxxx.xxxpredictiveWysoki
59Filexxxx/xxx_xxx_xxxxx.xpredictiveWysoki
60Filexxxxxx_xxx.xpredictiveMedium
61Filexxxxxx/xxxxxpredictiveMedium
62Filexxxxxxx/xxx_xxxxxxxx.xxxpredictiveWysoki
63Filexxxxx.xxxpredictiveMedium
64Filexxxxx.xxx/xxxxx/xxxxxxxxxxxpredictiveWysoki
65Filexxxxx.xxx/xxxxxxxx/xxxxxxxx/predictiveWysoki
66Filexxxxx.xxx/xxxxxxxxx/xxxxxx/xxxxxxxxxxxxx/xxxxxxxxxxx/xxxxxxxpredictiveWysoki
67Filexxxxxxxxx\xxxxxx\xxxx_xxxxx_xxxxx.xxxpredictiveWysoki
68Filexxxxxxxx/xxxxxxxx_xxxxxxx_xxxxxx/xxxxx.xxxpredictiveWysoki
69Filexxxx_xxx.xxxpredictiveMedium
70Filexxxxxxxxxxx/xxxxx-xxxx/xxxx/xxxx/xxxx-xxxxxxx-xxxxx.xpredictiveWysoki
71Filexxxxxxx/xxxxx.xpredictiveWysoki
72Filexxxxxxxxx/xxxx-xxxxxxxx.xpredictiveWysoki
73Filexxxxxxxxx/xxx.xpredictiveWysoki
74Filexxxxxxx.xpredictiveMedium
75Filexxxxxxx/xxxxxxxx.xpredictiveWysoki
76Filexxxxxxx.xxxpredictiveMedium
77Filexxxxxx/xxxxxxxxxxx.xxxpredictiveWysoki
78Filexxxxxxxx.xxxpredictiveMedium
79Filexxxxxxx/xxxxxxxxxxxxpredictiveWysoki
80Filexx_xxxxxx.xxxpredictiveWysoki
81Filexxxxxx/xxxxxx_xxxx.xxxpredictiveWysoki
82Filexxxx/xxxxxxx/xxxxxxx_xxx.xxxxxxxpredictiveWysoki
83Filexxxx/xxxxx/xxxxxxx.xpredictiveWysoki
84Filexxx_xxxxx_xxxxx.xpredictiveWysoki
85Filexxx.xxxxxx_xxxxpredictiveWysoki
86Filexxxx.xpredictiveNiski
87Filexxxxx.xxxpredictiveMedium
88Filexxx.xxxxx.xxxpredictiveWysoki
89Filexxxxx/_xxxxx.xxpredictiveWysoki
90Filexxxxxxxx.xxxpredictiveMedium
91Filexxxxxxxxxxxxxx.xxxpredictiveWysoki
92Filexxxxxx.xxxpredictiveMedium
93Filexxxxxxx/xxxxxxxx/xxxxxx-xxxxxx-xx-xx.xpredictiveWysoki
94Filexxxxxxxxx/xxxxxxxxx_xxxxxxxx.xxpredictiveWysoki
95Filexxxxxxx.xxxpredictiveMedium
96Filexxxxxxx.xxxpredictiveMedium
97Filexxxxxx/xxx/xxxxxxxx/xxxxx/xxxxx_xxxx.xxpredictiveWysoki
98Filexxxxxxxx/xx/xxxxxxxxxxpredictiveWysoki
99Filexxxxxx.xxpredictiveMedium
100Filexxxx_xxxx.xxxpredictiveWysoki
101Filexxxxxxxx.xxxpredictiveMedium
102Filexxxxxxxx.xxxpredictiveMedium
103Filexxxxxxx_xxxxxxx.xxxpredictiveWysoki
104Filexxxxxxxx.xxxpredictiveMedium
105Filexxxx/xxxxx/xxxx.xxpredictiveWysoki
106Filexxxx_xxxxxxx.xxxpredictiveWysoki
107Filexxxxxx.xxxpredictiveMedium
108Filexxxxxxxx-xxxxxx_xxxxx.xxxpredictiveWysoki
109Filexxxxxxxxx-xxxxxxxxxxxx-xxx/xxxx/xxxxx-xxxx.xxxpredictiveWysoki
110Filexxxxx/xxxx/xxxxx.xpredictiveWysoki
111Filexxxxxxxxxx.xxxxpredictiveWysoki
112Filexxx_xxxxx.xpredictiveMedium
113Filexxxxxxxxxx.xxxpredictiveWysoki
114Filexxxxxx-xxxxxx.xxpredictiveWysoki
115Filexxxxxxx/_/xxxxxxxxx/predictiveWysoki
116Filexxxxxxxx.xxxpredictiveMedium
117Filexxxxxx/xxxxxx/xxxx/xxxxxx/xxxxxxxxxxx.xxxpredictiveWysoki
118Filexxxxx.xxxpredictiveMedium
119Filexx-xxxxxxx/xxxxxxxpredictiveWysoki
120Filexx-xxxxxxxxx.xxxpredictiveWysoki
121File\xxx.\xxxxx\xxxxxxxxxxx\xx.xxxpredictiveWysoki
122File_x_/xxxx/_x_/xxx/xxxxxx_xxxxxxxxxxxxxpredictiveWysoki
123File~/xxxx-xxxxx-xxxxxxx.xxxpredictiveWysoki
124Libraryxxxx.xxxpredictiveMedium
125Libraryxxx/xxxxxx.xpredictiveMedium
126Libraryxxx/xx/xxxxxxx.xxpredictiveWysoki
127Libraryxxx/xxxxxx.xpredictiveMedium
128Libraryxxx/xxx.xpredictiveMedium
129Libraryxxx/xxxxxxxx/xxxx.xxxpredictiveWysoki
130Libraryxxxxxxxx.xxxpredictiveMedium
131Libraryxxxxxx.xxxpredictiveMedium
132Libraryxxxxxxx.xxxpredictiveMedium
133Libraryxxxxxxxx/xxxxxxxxx/xxxxxxxxx.xxxpredictiveWysoki
134Libraryxxxxxx.xxxpredictiveMedium
135LibraryxxxxxxpredictiveNiski
136Argument$xxxxxxx['xxxxxxxx-xxxxxx-xxxxxxxx']predictiveWysoki
137Argument:$xxxxpredictiveNiski
138Argumentx/xpredictiveNiski
139ArgumentxxxxxxpredictiveNiski
140ArgumentxxxxxpredictiveNiski
141ArgumentxxpredictiveNiski
142Argumentxxxx_xxxxpredictiveMedium
143Argumentxxxx_xxxxpredictiveMedium
144ArgumentxxxxpredictiveNiski
145Argumentxxx_xxx_xx_xxx_xxxxxxxxxx_xpredictiveWysoki
146Argumentxxxx-xxxxxpredictiveMedium
147Argumentxxxxxxx_xxxxxpredictiveWysoki
148Argumentxxxxxxx-xxxxpredictiveMedium
149Argumentxxxxxxxxxxxx$xxxxxxpredictiveWysoki
150Argumentxxx_xxxpredictiveNiski
151ArgumentxxxxxxpredictiveNiski
152ArgumentxxxxxxxxxxxpredictiveMedium
153ArgumentxxxxxxxpredictiveNiski
154ArgumentxxxxxpredictiveNiski
155Argumentxxxx[xxxxxxx]predictiveWysoki
156ArgumentxxxxxxxpredictiveNiski
157ArgumentxxxxpredictiveNiski
158ArgumentxxxxxxxxpredictiveMedium
159ArgumentxxxxxxxxpredictiveMedium
160ArgumentxxxxxxxxxxxpredictiveMedium
161Argumentxxxx/xxxxxxx/xxx/xxxxxxxxxpredictiveWysoki
162Argumentxxxxxxx/xxxxxxpredictiveWysoki
163ArgumentxxxxxpredictiveNiski
164ArgumentxxxxxxpredictiveNiski
165Argumentxxxx_xxxxxpredictiveMedium
166ArgumentxxxxpredictiveNiski
167ArgumentxxxxpredictiveNiski
168Argumentxxxx_xxxxxxxpredictiveMedium
169ArgumentxxpredictiveNiski
170Argumentxx=predictiveNiski
171ArgumentxxxxxxxxxxxxxxpredictiveWysoki
172Argumentxxxxx_xxxpredictiveMedium
173Argumentxxxx_xxx_xxxxxx/xxxx_xxx_xxxxxx/xxxx_xxx_xxxxxx/xxxx_xxx_xxxxxxpredictiveWysoki
174ArgumentxxxxxxxpredictiveNiski
175ArgumentxxxxpredictiveNiski
176ArgumentxxxxxxxxpredictiveMedium
177ArgumentxxxxxxxpredictiveNiski
178Argumentxxxxx xxxxpredictiveMedium
179Argumentxxxxxxx/xxxxxx_xxpredictiveWysoki
180Argumentxxxx_xxxpredictiveMedium
181Argumentxxxxx_xxxx/xxxxx_xxxxxxxpredictiveWysoki
182ArgumentxxxxpredictiveNiski
183ArgumentxxxxpredictiveNiski
184ArgumentxxxxxxpredictiveNiski
185Argumentxxxxx/xxxxxxxpredictiveWysoki
186ArgumentxxxxxxxpredictiveNiski
187ArgumentxxxxpredictiveNiski
188Argumentxxxx xxxxpredictiveMedium
189ArgumentxxxxxxpredictiveNiski
190ArgumentxxxxpredictiveNiski
191Argumentxxxx_xxpredictiveNiski
192ArgumentxxxxxpredictiveNiski
193Argumentxxxxx_xxxxxxpredictiveMedium
194Argumentxxxxxxxx_xxpredictiveMedium
195ArgumentxxxxxxxpredictiveNiski
196Argumentxxxxxxxx_xxxxxxxxxxxx_xxxxxpredictiveWysoki
197ArgumentxxxxpredictiveNiski
198Argumentxxxxxxxx_xxxxxpredictiveWysoki
199Argumentxxxxxx_xxpredictiveMedium
200Argumentxxxx-xxxxxxxxxxxx-xxxxx-xxpredictiveWysoki
201ArgumentxxxpredictiveNiski
202Argumentxxxxx_xxpredictiveMedium
203ArgumentxxxpredictiveNiski
204ArgumentxxxxxxxxxpredictiveMedium
205ArgumentxxxxxxpredictiveNiski
206Argumentxx_xxpredictiveNiski
207ArgumentxxxxxxxxpredictiveMedium
208ArgumentxxxxxxxxpredictiveMedium
209ArgumentxxxxxpredictiveNiski
210Argumentxxxxx/xxxpredictiveMedium
211ArgumentxxxxxxxxpredictiveMedium
212Argumentxx_xxxxxxxxxxxxx_xxx[xxxxxx][xxxxxxx]predictiveWysoki
213ArgumentxxxxpredictiveNiski
214Argumentxxxxxxxxx[xxxxx]predictiveWysoki
215ArgumentxxxpredictiveNiski
216ArgumentxxxxxxxxpredictiveMedium
217ArgumentxxxxxxxxpredictiveMedium
218ArgumentxxxxxpredictiveNiski
219ArgumentxxxxxpredictiveNiski
220ArgumentxxxxxpredictiveNiski
221Argumentx-xxxxxxxxx-xxxpredictiveWysoki
222Input Value/..predictiveNiski
223Input Value//predictiveNiski
224Input ValuexxxxxxxxpredictiveMedium
225Input Value<xxx>/*.xxxxx/predictiveWysoki
226Input Valuexxxxxx.xxxpredictiveMedium
227Input ValuexxxxxpredictiveNiski
228Input Valuex=xpredictiveNiski
229Patternxxxx_xxxxxx_xxxxxxxxx.xxx_xxxxxx_xxxxx_xxxxxxxxpredictiveWysoki
230Network Portxxx/xx (xxx)predictiveMedium
231Network Portxxx/xxxpredictiveNiski
232Network Portxxx/xxxpredictiveNiski

Referencje (2)

The following list contains external sources which discuss the actor and the associated activities:

Want to stay up to date on a daily basis?

Enable the mail alert feature now!