Domestic Kitten Análise

IOB - Indicator of Behavior (1000)

Curso de tempo

Idioma

en878
zh50
ar18
ru14
de10

País

nl884
ir64
us32
cn18
ru2

Actores

Actividades

Interesse

Curso de tempo

Tipo

Fabricante

Produto

Microsoft Windows88
Linux Kernel28
F5 BIG-IP18
Google Android16
Apache HTTP Server16

Vulnerabilidades

#VulnerabilidadeBaseTemp0dayHojeExpMasEPSSCTICVE
1nginx direitos alargados6.96.9$0-$5k$0-$5kNot DefinedNot Defined0.002410.38CVE-2020-12440
2Huawei ACXXXX/SXXXX SSH Packet direitos alargados7.57.3$5k-$25k$0-$5kNot DefinedOfficial Fix0.002460.02CVE-2014-8572
3Microsoft Windows WPAD direitos alargados8.07.9$25k-$100k$0-$5kHighOfficial Fix0.909620.03CVE-2016-3213
4Apache HTTP Server mod_rewrite Redirect6.76.7$25k-$100k$5k-$25kNot DefinedNot Defined0.002580.00CVE-2020-1927
5Microsoft Windows Graphics Remote Code Execution7.06.1$25k-$100k$5k-$25kUnprovenOfficial Fix0.054630.03CVE-2021-34530
6Microsoft Windows Event Tracing Privilege Escalation7.36.3$25k-$100k$5k-$25kUnprovenOfficial Fix0.000430.00CVE-2021-34487
7Microsoft IIS Roteiro Cruzado de Sítios5.24.7$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.005480.06CVE-2017-0055
8Cisco Secure Email and Web Manager Web-based Management Interface Fraca autenticação9.89.6$25k-$100k$5k-$25kNot DefinedOfficial Fix0.003370.02CVE-2022-20798
9nginx Log File direitos alargados7.87.4$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.000920.03CVE-2016-1247
10Undertow HTTP Request 1.x direitos alargados5.25.2$0-$5k$0-$5kNot DefinedNot Defined0.000900.03CVE-2021-20220
11Microsoft .NET Core/Visual Studio Negação de Serviço6.45.5$5k-$25k$0-$5kUnprovenOfficial Fix0.001790.07CVE-2021-26423
12Microsoft Windows TCP/IP Stack Privilege Escalation9.98.6$100k e mais$5k-$25kUnprovenOfficial Fix0.021830.04CVE-2021-26424
13Microsoft Windows Event Tracing Privilege Escalation8.37.3$100k e mais$5k-$25kUnprovenOfficial Fix0.000440.00CVE-2021-26425
14Microsoft Windows Bluetooth Driver Privilege Escalation8.37.3$100k e mais$5k-$25kUnprovenOfficial Fix0.000430.00CVE-2021-34537
15Microsoft Dynamics 365 Privilege Escalation8.57.4$25k-$100k$0-$5kUnprovenOfficial Fix0.007360.00CVE-2021-34524
16Microsoft Windows Storage Spaces Controller Local Privilege Escalation7.86.8$25k-$100k$5k-$25kUnprovenOfficial Fix0.000430.00CVE-2021-34536
17Microsoft Windows Graphics Remote Code Execution7.06.1$25k-$100k$5k-$25kUnprovenOfficial Fix0.054630.00CVE-2021-34533
18Microsoft Windows Services for NFS ONCRPC XDR Driver Divulgação de Informação6.45.5$25k-$100k$5k-$25kUnprovenOfficial Fix0.008940.00CVE-2021-36926
19Microsoft ASP.NET Core/Visual Studio Divulgação de Informação4.94.3$5k-$25k$0-$5kUnprovenOfficial Fix0.000430.00CVE-2021-34532
20Microsoft Windows Services for NFS ONCRPC XDR Driver Divulgação de Informação6.45.5$25k-$100k$5k-$25kUnprovenOfficial Fix0.008940.00CVE-2021-36933

IOC - Indicator of Compromise (17)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

TTP - Tactics, Techniques, Procedures (22)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IOA - Indicator of Attack (233)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDClasseIndicatorTipoAceitação
1File.travis.ymlpredictiveMédio
2File/.envpredictiveBaixo
3File/admin.phppredictiveMédio
4File/admin/subnets/ripe-query.phppredictiveAlto
5File/appliance/users?action=editpredictiveAlto
6File/apply.cgipredictiveMédio
7File/cgi-bin/nas_sharing.cgipredictiveAlto
8File/core/conditions/AbstractWrapper.javapredictiveAlto
9File/debug/pprofpredictiveMédio
10File/exportpredictiveBaixo
11File/file?action=download&filepredictiveAlto
12File/hardwarepredictiveMédio
13File/hub/api/userpredictiveAlto
14File/librarian/bookdetails.phppredictiveAlto
15File/medical/inventories.phppredictiveAlto
16File/monitoringpredictiveMédio
17File/opt/zimbra/jetty/webapps/zimbra/publicpredictiveAlto
18File/plugin/LiveChat/getChat.json.phppredictiveAlto
19File/plugins/servlet/audit/resourcepredictiveAlto
20File/plugins/servlet/project-config/PROJECT/rolespredictiveAlto
21File/replicationpredictiveMédio
22File/RestAPIpredictiveMédio
23File/tmp/zarafa-vacation-*predictiveAlto
24File/uncpath/predictiveMédio
25File/uploadpredictiveBaixo
26File/user/loader.php?api=1predictiveAlto
27File/xxx/xxx/xxxxxpredictiveAlto
28File/xxx/xxx/xxxxxxxx.xxxpredictiveAlto
29File/xxxxxx/xxxxxx.xxxxpredictiveAlto
30File/xxx-xxx/xxx.xxxpredictiveAlto
31File/xx-xxxx/xxxxxx/x.x/xxxxx?xxxpredictiveAlto
32Filexxxxxxxxxxxxxxxxxxxxxx.xxxxpredictiveAlto
33Filexxxxxxx.xxxpredictiveMédio
34Filexxxxxx.xxpredictiveMédio
35Filexxxxx\xxxxx\xxxxxxx\xxxxxxxx.xxxpredictiveAlto
36Filexxxxxxx.xxxpredictiveMédio
37Filexxxxxxx.xxxpredictiveMédio
38Filexxx/xxx/xxxx-xxxpredictiveAlto
39Filexxxxxxxxxxxxxxxxxx-xxxxxx-xxxxxxxx.xxxpredictiveAlto
40Filexxxxx.xxxpredictiveMédio
41Filexxxxxxxxxxxxxxxxxxxxx.xxxxpredictiveAlto
42Filexxxx/xxxxxxx/xxx/xxxxxx_xxxx.xpredictiveAlto
43Filexxxx-xxxx.xpredictiveMédio
44Filexxxx/xxxxxxx.xxxpredictiveAlto
45Filex:\xxxxxxx xxxxx\xxxxxx xxxxx\xxx\xxxxxxx.xxxpredictiveAlto
46Filex:\xxxxxxx\xxxxxxxx\xxxxxx\xxxpredictiveAlto
47Filexxx-xxx/xx.xxxpredictiveAlto
48Filexxx/xxxxxxx.xxpredictiveAlto
49Filexxxxx.xxxpredictiveMédio
50Filexxxxxx.xxxpredictiveMédio
51Filexxx_xxxxxx.xxxpredictiveAlto
52Filexxx.xxxpredictiveBaixo
53Filexxxxxx.xxxpredictiveMédio
54Filexxxxxxxx.xxpredictiveMédio
55Filexxxxxxxxxx/xxxxxx/xxxxxxxxx.xxxx/xxxx.xxx/predictiveAlto
56Filex_xxxxxxpredictiveMédio
57Filexxxxxxx.xxxpredictiveMédio
58Filexxxxxxx/xxxxx/xxxxxx.xpredictiveAlto
59Filexxxxxxx/xxx/xxxxxxx/xxxx.xpredictiveAlto
60Filexxxxxxx/xxxx/xxxx_xxxxxxxxx_xxxxx.xpredictiveAlto
61Filexxxx_xxxxx.xxxpredictiveAlto
62Filexxx/xxxxxxxx/xxx_xxxxxxxxxxxx.xpredictiveAlto
63Filexxxxxxxx.xpredictiveMédio
64Filexx/xxxxxxxxx.xpredictiveAlto
65Filexx/xxxxx.xpredictiveMédio
66Filexx/xxxxx/xxxxxxx.xpredictiveAlto
67Filexxxxx.xxxpredictiveMédio
68Filexxxxxxx/xxxx/xx/xx/xxxxxx.xxxpredictiveAlto
69Filexxxxxxxxxx.xxpredictiveAlto
70Filexxxxxxxxx.xxxpredictiveAlto
71Filexxxx/x.xpredictiveMédio
72Filexxxx/xxxxxxxxxxxxxxxxxxxxxxxx.xxpredictiveAlto
73Filexxxxxxxxxxxxxxxxxxxxx.xxxpredictiveAlto
74Filexxxxx-xxxxx.xpredictiveAlto
75Filexxxxxx_xxxxx_xxxxxxx.xpredictiveAlto
76Filexxxxx-xxxxxxxxxx.xpredictiveAlto
77Filexxx/xxxxxx.xxxpredictiveAlto
78Filexxxxx.xxxpredictiveMédio
79Filexxxxx.xxx?xx=xxxxxxxx.xxxxxxpredictiveAlto
80Filexxxxx:/xxxxxxxx/xxxxxxxxxxxx.xxxxpredictiveAlto
81Filexxxxx/xxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxxpredictiveAlto
82Filexxxx_xxxxxx.xxpredictiveAlto
83Filexxxxxx/xxx/xxxxxxxx.xpredictiveAlto
84Filexxxxxx/xxxxx/xxxxx_xxxxxx_xxxxxx.xpredictiveAlto
85Filexxxxxxxxxxx/xxx.xpredictiveAlto
86Filexxxxxxx/xx_xxx.xpredictiveAlto
87Filexxxxxxxxx/xxxxxxx/xxxxxx/xxxxxxxxxx.xxxpredictiveAlto
88Filexxxx.xxxpredictiveMédio
89Filexxxxx.xxxpredictiveMédio
90Filexxxxx.xxxpredictiveMédio
91Filexxxxxxxxxx/xxx.xpredictiveAlto
92Filexxxx.xpredictiveBaixo
93Filexxxx.xxxpredictiveMédio
94Filexxxxxx_xxxxx_xxxxxxx.xpredictiveAlto
95Filexxxxxxxxxxxxxxxx.xpredictiveAlto
96Filexxx/xxxxxxxxx/xx_xxxxxx_xxx.xpredictiveAlto
97Filexxx/xxxxxxxxx/x_xxxxxx.xpredictiveAlto
98Filexxx/xxx_xxxxx/xx_xxxxx.xpredictiveAlto
99Filexxxx.xxxpredictiveMédio
100Filexxx_xxxxxxx.xpredictiveAlto
101Filexxxxxxxxxxxxxxxxxxxxx.xxxxpredictiveAlto
102Filexxx_xx.xpredictiveMédio
103Filexxxxxxxxxxxxxxxxx.xxxpredictiveAlto
104FilexxxxxxxxpredictiveMédio
105Filexxxxxxxxx.xxx.xxxpredictiveAlto
106Filexxxxxxx.xxxpredictiveMédio
107Filexxxxxxxx.xxxxpredictiveAlto
108Filexxxxxxxxxxxxx.xxxxpredictiveAlto
109Filexxxxxx.xpredictiveMédio
110Filexxxxxx/?x=xxxxx/\xxxxx\xxx/xxxxxxxxxxxxxx&xxxxxxxx=xxxx_xxxx_xxxx_xxxxx&xxxx[x]=xxxxxx&xxxx[x][]predictiveAlto
111Filexxxxxxxxxxxxxx.xxxpredictiveAlto
112Filexxxxxxxx.xxxpredictiveMédio
113Filexxxxxxx.xxxpredictiveMédio
114Filexxxxxxxx.xxxpredictiveMédio
115Filexxxxx-xxxx/xxxxx-xxxxx-xxxx.xxxpredictiveAlto
116Filexxxxxxx.xpredictiveMédio
117Filexxxxxxxxxx_xxxxx.xxxxxxpredictiveAlto
118Filexxxx_xxx_xx.xpredictiveAlto
119Filexx_xxx.xpredictiveMédio
120Filexxxxxx.xpredictiveMédio
121Filexxxxx.xxxpredictiveMédio
122Filexxxx-xxxxxx.xpredictiveAlto
123Filexxxxxxx.xpredictiveMédio
124Filexxx/xxx_xxxxx.xpredictiveAlto
125Filexxxxxxx.xxx.xx.xxxxxxxxxxx.xxxpredictiveAlto
126Filexxxxxxxxxxxxx.xxpredictiveAlto
127Filexxxxxxx/xxxxxxx/xxxxxx/xxxxxx_xxxx.xxxpredictiveAlto
128Filexxxxxx/xxxxxxxx/xxx/xxxxxxxxx.xxxxxxx.xxxpredictiveAlto
129Filexxxx.xxxxxxxxx.xxxpredictiveAlto
130Filexxxx_xxxx.xxxpredictiveAlto
131Filexxxxxx.xxxpredictiveMédio
132Filexxx.xxxpredictiveBaixo
133Filexxxxxx/xx/xxxx.xxxpredictiveAlto
134Filexx-xxxxxx.xxxpredictiveAlto
135Filexx-xxxxxxxx/xxxxx-xx-xxxxx.xxxpredictiveAlto
136Filexx-xxxxxxxx/xxxxxxx-xxxxxxxx.xxxpredictiveAlto
137Filexx-xxxxxxxx/xxxx.xxxpredictiveAlto
138Filexx/xx/xxxxxpredictiveMédio
139Filexx_xxxxxxx.xpredictiveMédio
140File_xxxxxxxx/xxxxxxxx.xxxpredictiveAlto
141File~/xxxx/xxx/xxxxxxx/xxxxxxxxxx/xxxxxx.xxxpredictiveAlto
142File~/xxxxx.xxxpredictiveMédio
143Library/_xxx_xxx/xxxxx.xxxpredictiveAlto
144Libraryxxxxx/xxxxxxxxx/xxxx.xxxxxxxxx.xxxpredictiveAlto
145Libraryxxxxx.xxxpredictiveMédio
146Libraryxxxx.xxxpredictiveMédio
147Libraryxxxxxxxxxx/xxxxxxxx.xpredictiveAlto
148Libraryxxxxxxxx.xxxpredictiveMédio
149Libraryxxxxxxxxx.xxxpredictiveAlto
150Libraryxxxxxxxx.xxxpredictiveMédio
151Libraryxxxxxx.xxx.xxx.xxxpredictiveAlto
152Libraryxxxxxxxx.xxxpredictiveMédio
153Libraryxxxxxxxx.xxxpredictiveMédio
154Argument-xpredictiveBaixo
155Argumentxxxxxx_xxxxpredictiveMédio
156ArgumentxxxxxxxxpredictiveMédio
157ArgumentxxxpredictiveBaixo
158ArgumentxxxxxpredictiveBaixo
159Argumentxxx_xxpredictiveBaixo
160ArgumentxxxxxxxxpredictiveMédio
161ArgumentxxxxxxpredictiveBaixo
162ArgumentxxxxxxxpredictiveBaixo
163Argumentxxxxxxx xxxxpredictiveMédio
164ArgumentxxxxxxxxxxpredictiveMédio
165ArgumentxxxxxxxpredictiveBaixo
166Argumentxxxxxxx_xxxx->xxx($xxxxxxxx)predictiveAlto
167Argumentxxxxxx_xxxxpredictiveMédio
168ArgumentxxxxpredictiveBaixo
169ArgumentxxpredictiveBaixo
170ArgumentxxpredictiveBaixo
171ArgumentxxxxxxxxxxxxxxpredictiveAlto
172ArgumentxxxxxxxpredictiveBaixo
173Argumentxxxxx[xxxxx][xx]predictiveAlto
174ArgumentxxxxpredictiveBaixo
175Argumentxxxx_xxxxxx_xxxxpredictiveAlto
176Argumentxxxx x xxxxpredictiveMédio
177Argumentxxxxxxxxx/xxxxxxxxxpredictiveAlto
178ArgumentxxxxxxxxxxxxxxxxxxxxpredictiveAlto
179Argumentxxxx_xxxpredictiveMédio
180ArgumentxxpredictiveBaixo
181Argumentxxxxxxx/xxxx/xxxxxxxxpredictiveAlto
182Argumentxxxxx/xxxxxxpredictiveMédio
183ArgumentxxxxpredictiveBaixo
184Argumentxxxx_xxxxpredictiveMédio
185ArgumentxxxxxxxxpredictiveMédio
186ArgumentxxxxxxxxpredictiveMédio
187ArgumentxxxxxxxxpredictiveMédio
188ArgumentxxxxxxxxxpredictiveMédio
189Argumentxxx_xxxpredictiveBaixo
190ArgumentxxxxxxpredictiveBaixo
191Argumentxxxx_xx_xxxpredictiveMédio
192Argumentxx_xxxxxxx_xxxxxxxpredictiveAlto
193ArgumentxxxxxxxxxxxxxpredictiveAlto
194ArgumentxxxxxpredictiveBaixo
195Argumentxxxxxxx_xxxpredictiveMédio
196ArgumentxxxxpredictiveBaixo
197ArgumentxxxxxxxpredictiveBaixo
198ArgumentxxxxxxpredictiveBaixo
199Argumentxxxxxxxx_xxxxxpredictiveAlto
200ArgumentxxxxxxxxxxxxpredictiveMédio
201ArgumentxxxxxxpredictiveBaixo
202ArgumentxxxxxpredictiveBaixo
203ArgumentxxxxxxxxxxxxxpredictiveAlto
204ArgumentxxxpredictiveBaixo
205ArgumentxxxxxxpredictiveBaixo
206ArgumentxxxpredictiveBaixo
207Argumentxxxxxxxx-xxxxxxxxpredictiveAlto
208ArgumentxxxpredictiveBaixo
209ArgumentxxxxpredictiveBaixo
210ArgumentxxxxpredictiveBaixo
211ArgumentxxxxxxxxpredictiveMédio
212ArgumentxxxxxxxpredictiveBaixo
213Argumentxxxx->xxxxxxxpredictiveAlto
214Argumentx-xxxxxxxxx-xxxpredictiveAlto
215ArgumentxxxpredictiveBaixo
216Argument_xxx_xxxxxxx_xxxxxxx_xxxxxxxxxxxxx_xxx_xxx_xxxxxxx_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx_xxxxxxxxxxxxxxxpredictiveAlto
217Argument_xxx_xxxxxxxxxxx_predictiveAlto
218Input Value' xxx (xxxxxx xxxx xxxx (xxxxxx(xxxxx(x)))xxxx)-- xxxxpredictiveAlto
219Input Value.%xx.../.%xx.../predictiveAlto
220Input Value../predictiveBaixo
221Input Valuexxx xxxxxxxxpredictiveMédio
222Input ValuexxxxxxxxpredictiveMédio
223Input Valuexxxxxxxxx' xxx 'x'='xpredictiveAlto
224Input ValuexxxxxpredictiveBaixo
225Input ValuexxxxxxxxxxpredictiveMédio
226Input Valuexxxxxxx_xxxxx.xxxxxxx_xxxxxxxpredictiveAlto
227Input Value\xpredictiveBaixo
228Input Value….//predictiveBaixo
229Pattern|xx|predictiveBaixo
230Network PortxxxxxpredictiveBaixo
231Network Portxx xxxxxxx xxx.xx.xx.xxpredictiveAlto
232Network Portxxx/xx (xxxxxx)predictiveAlto
233Network Portxxx xxxxxx xxxxpredictiveAlto

Referências (3)

The following list contains external sources which discuss the actor and the associated activities:

Interested in the pricing of exploits?

See the underground prices here!