APT32 Анализ

IOB - Indicator of Behavior (622)

Временная шкала

Язык

en	502
zh	40
it	39
fr	18
es	7

Страна

us	440
cn	106
vn	23
me	13
tr	11

Акторы

APT32	16
OceanLotus	9
Cobalt Strike	8
StrikeSuit Gif	5
APT28	4

Интерес

Тип

Not Defined	222
Smartphone Operating System	42
Operating System	36
Content Management System	24
Router Operating System	20

Поставщик

Not Defined	138
Apple	50
Google	32
Microsoft	22
Cisco	16

Продукт

Google Android	22
Apple iOS	16
Linux Kernel	14
Apple macOS	10
Microsoft Windows	10

Уязвимости

#	Уязвимости	Base	Temp	0day	Сегодня	Э�	Rem	CTI	EPSS	CVE
1	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash раскрытие информации	5.3	5.2	$5k-$25k	$0-$5k	High	Workaround	0.02	0.02016	CVE-2007-1192
2	BD Totalys MultiProcessor слабая аутентификация	8.1	7.7	$0-$5k	$0-$5k	Not Defined	Official Fix	0.43	0.00043	CVE-2022-40263
3	DZCP deV!L`z Clanportal config.php эскалация привилегий	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	1.47	0.00943	CVE-2010-0966
4	Google Chrome V8 Remote Code Execution	6.3	6.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.02	0.24380	CVE-2020-16040
5	Watchdog Anti-Virus IoControlCode wsdk-driver.sys 0x80002008 эскалация привилегий	5.3	5.2	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.05	0.00047	CVE-2023-1453
6	Apache PDFbox XML Parser XML External Entity	7.8	7.6	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	0.00091	CVE-2016-2175
7	Google Android SimpleDecodingSource.cpp doRead эскалация привилегий	9.8	9.6	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.00	0.00121	CVE-2021-39623
8	D-Link DCS-2530L/DCS-2670L ddns_enc.cgi эскалация привилегий	7.5	7.5	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.02	0.00135	CVE-2020-25079
9	Gempar Script Toko Online shop_display_products.php sql-инъекция	7.3	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.02	0.00100	CVE-2009-0296
10	Puppet Agent SSL Certificate Valu слабая аутентификация	5.5	5.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.07	0.00058	CVE-2018-11751
11	Norton Password Manager эскалация привилегий	6.3	6.0	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	0.00072	CVE-2019-18381
12	Facebook osquery Configuration extensions.load эскалация привилегий	7.7	7.3	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	0.00222	CVE-2019-3567
13	Microsoft Windows HMAC Key Derivation Local Privilege Escalation	8.8	8.1	$25k-$100k	$5k-$25k	Unproven	Official Fix	0.00	0.00048	CVE-2023-36400
14	Microsoft Windows Kernel NtQueryInformationJobObject Kernel Memory раскрытие информации	5.1	4.6	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.00	0.00070	CVE-2017-8478
15	OpenSSH Authentication Username раскрытие информации	5.3	4.8	$5k-$25k	$0-$5k	High	Official Fix	0.03	0.10737	CVE-2016-6210
16	TP-Link AC1750 NetUSB.ko повреждение памяти	8.8	8.6	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	0.00084	CVE-2022-24354
17	Pallets Werkzeug Windows SharedDataMiddleware обход каталога	7.5	7.3	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	0.61136	CVE-2019-14322
18	Peplink Balance Web Admin connector.php раскрытие информации	5.9	5.6	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	0.00283	CVE-2020-24246
19	Tenda AC11 POST Request setmac повреждение памяти	7.6	7.6	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	0.96984	CVE-2021-31755
20	Apple macOS Kernel эскалация привилегий	7.8	7.5	$5k-$25k	$0-$5k	High	Official Fix	0.00	0.00192	CVE-2020-27932

Кампании (2)

These are the campaigns that can be associated with the actor:

Cobalt Kitty
OceanLotus

IOC - Indicator of Compromise (60)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP-адрес	Hostname	Актор	Кампании	Identified	Тип	Уверенность
1	23.227.196.126	23-227-196-126.static.hvvc.us	APT32	Cobalt Kitty	15.12.2020	verified	Высокий
2	23.227.196.210	23-227-196-210.static.hvvc.us	APT32		15.12.2020	verified	Высокий
3	23.227.199.121	23-227-199-121.static.hvvc.us	APT32	Cobalt Kitty	15.12.2020	verified	Высокий
4	27.102.70.211		APT32	Cobalt Kitty	15.12.2020	verified	Высокий
5	37.59.198.130		APT32	OceanLotus	15.12.2020	verified	Высокий
6	37.59.198.131		APT32	OceanLotus	15.12.2020	verified	Высокий
7	45.32.100.179	45.32.100.179.vultr.com	APT32	OceanLotus	15.12.2020	verified	Средний
8	45.32.105.45		APT32	OceanLotus	15.12.2020	verified	Высокий
9	45.32.114.49	45.32.114.49.vultr.com	APT32	OceanLotus	15.12.2020	verified	Средний
10	45.76.147.201	45.76.147.201.vultr.com	APT32	OceanLotus	15.12.2020	verified	Средний
11	45.76.179.28	45.76.179.28.vultr.com	APT32	OceanLotus	15.12.2020	verified	Средний
12	45.76.179.151	45.76.179.151.vultr.com	APT32	OceanLotus	15.12.2020	verified	Средний
13	45.77.39.101	45.77.39.101.vultr.com	APT32	OceanLotus	15.12.2020	verified	Средний
14	45.114.117.137		APT32	Cobalt Kitty	15.12.2020	verified	Высокий
15	45.114.117.164	folien.reisnart.com	APT32	OceanLotus	15.12.2020	verified	Высокий
16	64.62.174.9	agent2.jenkins.aoindustries.com	APT32	OceanLotus	15.12.2020	verified	Высокий
17	64.62.174.16	unassigned16.net2.fc.aoindustries.com	APT32	OceanLotus	15.12.2020	verified	Высокий
18	64.62.174.17	unassigned17.net2.fc.aoindustries.com	APT32	OceanLotus	15.12.2020	verified	Высокий
19	64.62.174.21	unassigned21.net2.fc.aoindustries.com	APT32	OceanLotus	15.12.2020	verified	Высокий
20	64.62.174.41	dev1.plant-orbit.com	APT32	OceanLotus	15.12.2020	verified	Высокий
21	64.62.174.99	unassigned99.net2.fc.aoindustries.com	APT32	OceanLotus	15.12.2020	verified	Высокий
22	64.62.174.145	unassigned145.net2.fc.aoindustries.com	APT32	OceanLotus	15.12.2020	verified	Высокий
23	64.62.174.146	unassigned146.net2.fc.aoindustries.com	APT32	OceanLotus	15.12.2020	verified	Высокий
24	79.143.87.174		APT32	OceanLotus	15.12.2020	verified	Высокий
25	80.255.3.87		APT32		15.12.2020	verified	Высокий
26	89.33.64.207		APT32	OceanLotus	15.12.2020	verified	Высокий
27	89.33.64.232	mypicsfromplane.com	APT32	OceanLotus	15.12.2020	verified	Высокий
28	103.28.44.112	103028044112.hkserverdomain.com	APT32	OceanLotus	15.12.2020	verified	Высокий
29	103.28.44.115	103028044115.hkserverdomain.com	APT32	OceanLotus	15.12.2020	verified	Высокий
30	103.41.177.33		APT32	Cobalt Kitty	15.12.2020	verified	Высокий
31	103.53.197.202	sg06.dewaweb.com	APT32		15.12.2020	verified	Высокий
32	104.24.118.185		APT32	Cobalt Kitty	15.12.2020	verified	Высокий
33	104.24.119.185		APT32	Cobalt Kitty	15.12.2020	verified	Высокий
34	104.27.166.79		APT32	Cobalt Kitty	15.12.2020	verified	Высокий
35	104.27.167.79		APT32	Cobalt Kitty	15.12.2020	verified	Высокий
36	104.237.218.67	usgreatly.com	APT32	Cobalt Kitty	15.12.2020	verified	Высокий
37	104.237.218.70	70.utdanne.104.xandien.nl	APT32		15.12.2020	verified	Высокий
38	104.237.218.72	emudd.pointumetwe.com	APT32		15.12.2020	verified	Высокий
39	108.170.31.69		APT32	Cobalt Kitty	15.12.2020	verified	Высокий
40	110.10.179.65		APT32	Cobalt Kitty	15.12.2020	verified	Высокий
41	128.199.90.216		APT32	OceanLotus	15.12.2020	verified	Высокий
42	128.199.227.80	426977.cloudwaysapps.com	APT32	OceanLotus	15.12.2020	verified	Высокий
43	138.197.236.215		APT32	OceanLotus	15.12.2020	verified	Высокий
44	139.59.217.207		APT32	OceanLotus	15.12.2020	verified	Высокий
45	139.59.220.10		APT32	OceanLotus	15.12.2020	verified	Высокий
46	139.59.220.12		APT32	OceanLotus	15.12.2020	verified	Высокий
47	139.59.223.191		APT32	OceanLotus	15.12.2020	verified	Высокий
48	176.107.176.6	176.107.176.6.ptr	APT32	Cobalt Kitty	15.12.2020	verified	Высокий
49	176.107.177.216	176.107.177.216.deltahost-ptr	APT32	Cobalt Kitty	15.12.2020	verified	Высокий
50	176.223.111.116		APT32	Cobalt Kitty	15.12.2020	verified	Высокий
51	184.95.51.179	pen179.penflexhost.com	APT32	Cobalt Kitty	15.12.2020	verified	Высокий
52	184.95.51.181	mx.earthgeneration.org	APT32	Cobalt Kitty	15.12.2020	verified	Высокий
53	184.95.51.190	laudantiumkvgqi.finewonu.club	APT32	Cobalt Kitty	15.12.2020	verified	Высокий
54	185.157.79.3	185.157.79.3.deltahost-ptr	APT32		15.12.2020	verified	Высокий
55	188.166.219.18	696006.cloudwaysapps.com	APT32	OceanLotus	15.12.2020	verified	Высокий
56	192.121.176.148		APT32	Cobalt Kitty	15.12.2020	verified	Высокий
57	193.169.245.78	193.169.245.78.deltahost-ptr	APT32		15.12.2020	verified	Высокий
58	193.169.245.137	n116.deltahost.com.ua	APT32		15.12.2020	verified	Высокий
59	203.114.75.22		APT32	OceanLotus	15.12.2020	verified	Высокий
60	203.114.75.73		APT32	OceanLotus	15.12.2020	verified	Высокий

TTP - Tactics, Techniques, Procedures (23)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Уязвимости	Вектор доступа	Тип	Уверенность
1	T1006	CWE-21, CWE-22, CWE-23	Path Traversal	predictive	Высокий
2	T1040	CWE-319	Authentication Bypass by Capture-replay	predictive	Высокий
3	T1055	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	Высокий
4	T1059	CWE-94	Argument Injection	predictive	Высокий
5	T1059.007	CWE-79, CWE-80	Cross Site Scripting	predictive	Высокий
6	T1068	CWE-264, CWE-269, CWE-284	Execution with Unnecessary Privileges	predictive	Высокий
7	T1110.001	CWE-798	Hard-coded Credentials	predictive	Высокий
8	T1202	CWE-77, CWE-78	Command Shell in Externally Accessible Directory	predictive	Высокий
9	T1204.001	CWE-601	Open Redirect	predictive	Высокий
10	T1211	CWE-254	7PK Security Features	predictive	Высокий
11	T1222	CWE-275, CWE-276	Permission Issues	predictive	Высокий
12	T1505	CWE-89	SQL Injection	predictive	Высокий
13	T1548.002	CWE-285	Improper Authorization	predictive	Высокий
14	T1552	CWE-255, CWE-522	Credentials Management	predictive	Высокий
15	T1574	CWE-426, CWE-427	Untrusted Search Path	predictive	Высокий
16	T1587.003	CWE-295	Improper Certificate Validation	predictive	Высокий
17	T1588.001	CWE-912	Backdoor	predictive	Высокий
18	T1592	CWE-200, CWE-209, CWE-532	Invocation of Process Using Visible Sensitive Information	predictive	Высокий
19	T1592.004	CWE-16	Configuration	predictive	Высокий
20	T1600	CWE-310, CWE-311, CWE-326, CWE-327	Cryptographic Issues	predictive	Высокий
21	T1600.001	CWE-320, CWE-321, CWE-547	Key Management Error	predictive	Высокий
22	T1608.002	CWE-434	Incomplete Identification of Uploaded File Variables	predictive	Высокий
23	T1611	CWE-265	Containment Errors	predictive	Высокий

IOA - Indicator of Attack (227)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Класс	Indicator	Тип	Уверенность
1	File	/admin/	predictive	Низкий
2	File	/api/	predictive	Низкий
3	File	/cgi-bin/cgiServer.exx	predictive	Высокий
4	File	/cgi-bin/login_action.cgi	predictive	Высокий
5	File	/cgi-bin/nobody/Search.cgi	predictive	Высокий
6	File	/cgi-bin/webviewer_login_page	predictive	Высокий
7	File	/dev/sg0	predictive	Средний
8	File	/event/runquery.do	predictive	Высокий
9	File	/filemanager/php/connector.php	predictive	Высокий
10	File	/forum/away.php	predictive	Высокий
11	File	/goform/setmac	predictive	Высокий
12	File	/log_download.cgi	predictive	Высокий
13	File	/manager?action=getlogcat	predictive	Высокий
14	File	/mgmt/tm/util/bash	predictive	Высокий
15	File	/pages/systemcall.php?command={COMMAND}	predictive	Высокий
16	File	/password.html	predictive	Высокий
17	File	/system/ws/v11/ss/email	predictive	Высокий
18	File	/uncpath/	predictive	Средний
19	File	/upload	predictive	Низкий
20	File	add_vhost.php	predictive	Высокий
21	File	admin/gv_mail.php	predictive	Высокий
22	File	admin/images.aspx	predictive	Высокий
23	File	admin/index.php	predictive	Высокий
24	File	adv2.php?action=modify	predictive	Высокий
25	File	agent.cfg	predictive	Средний
26	File	arch/x86/include/asm/fpu/internal.h	predictive	Высокий
27	File	asm/float.c	predictive	Средний
28	File	asm/nasm.c	predictive	Средний
29	File	auth.php	predictive	Средний
30	File	backup.cgi	predictive	Средний
31	File	binder.c	predictive	Средний
32	File	bitfield.c	predictive	Средний
33	File	blob.cpp	predictive	Средний
34	File	books.php	predictive	Средний
35	File	c.php	predictive	Низкий
36	File	cgi-bin/	predictive	Средний
37	File	cgi-bin/ddns_enc.cgi	predictive	Высокий
38	File	cgi-bin/luci/admin/network/firewall/rules	predictive	Высокий
39	File	cgi-bin/MANGA/admin.cgi	predictive	Высокий
40	File	cli.conf	predictive	Средний
41	File	coders/png.c	predictive	Средний
42	File	coders/tiff.c	predictive	Высокий
43	File	coffgen.c	predictive	Средний
44	File	config.xml	predictive	Средний
45	File	connector.minimal.php	predictive	Высокий
46	File	data/gbconfiguration.dat	predictive	Высокий
47	File	db.php	predictive	Низкий
48	File	detail.php	predictive	Средний
49	File	devtools.sh	predictive	Средний
50	File	domain/section/markdown/markdown.go	predictive	Высокий
51	File	drivers/gpu/drm/udl/udl_fb.c	predictive	Высокий
52	File	drivers/scsi/sr_ioctl.c	predictive	Высокий
53	File	drivers/usb/misc/iowarrior.c	predictive	Высокий
54	File	ebmlstring.c	predictive	Средний
55	File	elf.c	predictive	Низкий
56	File	email.php	predictive	Средний
57	File	events-manager.js	predictive	Высокий
58	File	ExceptionHandler.php	predictive	Высокий
59	File	extensions.load	predictive	Высокий
60	File	FlexPaperViewer.swf	predictive	Высокий
61	File	folder_view.php	predictive	Высокий
62	File	FortiClientOnlineInstaller.exe	predictive	Высокий
63	File	framework/core/subsystems/expRouter.php	predictive	Высокий
64	File	fs/userfaultfd.c	predictive	Высокий
65	File	function.c	predictive	Средний
66	File	functions.php	predictive	Высокий
67	File	functions_mod_user.php	predictive	Высокий
68	File	getRemoteImage.php	predictive	Высокий
69	File	get_set.ccp	predictive	Средний
70	File	gki_buffer.cc	predictive	Высокий
71	File	handle_load_config.php	predictive	Высокий
72	File	hh.exe	predictive	Низкий
73	File	image_upload.php	predictive	Высокий
74	File	imap/lmtp_sieve.c	predictive	Высокий
75	File	inc/config.php	predictive	Высокий
76	File	inc/filebrowser/browser.php	predictive	Высокий
77	File	include/findusers.php	predictive	Высокий
78	File	includes/head.inc.php	predictive	Высокий
79	File	index.php	predictive	Средний
80	File	init.inc.php	predictive	Средний
81	File	intervalCheck.jsp	predictive	Высокий
82	File	iptc.c	predictive	Низкий
83	File	ItemReview.php	predictive	Высокий
84	File	items.c	predictive	Низкий
85	File	items.queries.php	predictive	Высокий
86	File	item_show.php	predictive	Высокий
87	File	JBIG2Stream.cc	predictive	Высокий
88	File	jeecgFormDemoController.do?commonUpload	predictive	Высокий
89	File	jfinal_cms/admin/filemanager/list	predictive	Высокий
90	File	jpgraph.php	predictive	Средний
91	File	kbdint.c	predictive	Средний
92	File	kernel/events/core.c	predictive	Высокий
93	File	kernel/exit.c	predictive	Высокий
94	File	kernel/trace/trace_events_filter.c	predictive	Высокий
95	File	launchd	predictive	Низкий
96	File	libnvmmlite_video.so	predictive	Высокий
97	File	libr/asm/asm.c	predictive	Высокий
98	File	main/scala/authentikat/jwt/JsonWebToken.scala	predictive	Высокий
99	File	misc/apr_rmm.c	predictive	Высокий
100	File	mm/mempolicy.c	predictive	Высокий
101	File	mm/oom_kill.c	predictive	Высокий
102	File	model/__show_info.php	predictive	Высокий
103	File	modules/m_sasl.c	predictive	Высокий
104	File	NativeNfcManager.cpp	predictive	Высокий
105	File	net/ipv4/datagram.c	predictive	Высокий
106	File	net/ipv4/inet_connection_sock.c	predictive	Высокий
107	File	net/packet/af_packet.c	predictive	Высокий
108	File	openjp2/pi.c	predictive	Средний
109	File	pages_system_settings.php	predictive	Высокий
110	File	plugins\meta_engine\libfolder_plugin.dll	predictive	Высокий
111	File	prod.php	predictive	Средний
112	File	prog/htmlviewer.c	predictive	Высокий
113	File	proxy.cgi	predictive	Средний
114	File	public/index.php/home	predictive	Высокий
115	File	public/index.php/home/membersnsfriend/findlist.html	predictive	Высокий
116	File	QueryComponentRendererValue!Default.jspa	predictive	Высокий
117	File	RecentLocationApps.java	predictive	Высокий
118	File	register/check/username?username	predictive	Высокий
119	File	registration_detailed.inc.php	predictive	Высокий
120	File	reports_mta_queue_status.html	predictive	Высокий
121	File	secure_img_render.php	predictive	Высокий
122	File	server_databases.php	predictive	Высокий
123	File	setenv.sh	predictive	Средний
124	File	setup/index.php	predictive	Высокий
125	File	shop.cgi	predictive	Средний
126	File	shop_display_products.php	predictive	Высокий
127	File	showcat.php	predictive	Средний
128	File	SimpleDecodingSource.cpp	predictive	Высокий
129	File	software-description.php	predictive	Высокий
130	File	svox_ssml_parser.cpp	predictive	Высокий
131	File	SystemEvent.jsp	predictive	Высокий
132	File	system_log.cgi	predictive	Высокий
133	File	tls1.c	predictive	Низкий
134	File	ui/artifact/upload	predictive	Высокий
135	File	upgrade_handle.php	predictive	Высокий
136	File	view/ProductsView.php	predictive	Высокий
137	File	WealthT24/GetImage	predictive	Высокий
138	File	welcome.php	predictive	Средний
139	File	www/content/lessons/"lesson	predictive	Высокий
140	Library	AeXNSPkgDLLib.dll	predictive	Высокий
141	Library	ATIDXX64.DLL	predictive	Средний
142	Library	ENCDEC.DLL	predictive	Средний
143	Library	filmfd.sys	predictive	Средний
144	Library	fs/ncpfs/ncplib_kernel.c	predictive	Высокий
145	Library	igcore19d.dll	predictive	Высокий
146	Library	Lib/DocXMLRPCServer.py	predictive	Высокий
147	Library	lib/MongoLite/Database.php	predictive	Высокий
148	Library	lib/rrd.php	predictive	Средний
149	Library	Monitor_win7_x64.sys	predictive	Высокий
150	Library	Monitor_x86.sys	predictive	Высокий
151	Library	wsdk-driver.sys	predictive	Высокий
152	Argument	$line	predictive	Низкий
153	Argument	%s	predictive	Низкий
154	Argument	agentid	predictive	Низкий
155	Argument	app	predictive	Низкий
156	Argument	AUTHENTICATE	predictive	Средний
157	Argument	basePath	predictive	Средний
158	Argument	bauth	predictive	Низкий
159	Argument	bookid	predictive	Низкий
160	Argument	cat	predictive	Низкий
161	Argument	catid	predictive	Низкий
162	Argument	cat_id	predictive	Низкий
163	Argument	ccp_act	predictive	Низкий
164	Argument	charset	predictive	Низкий
165	Argument	code_no	predictive	Низкий
166	Argument	configFile	predictive	Средний
167	Argument	content	predictive	Низкий
168	Argument	Content-Length	predictive	Высокий
169	Argument	CPG_M_DIR	predictive	Средний
170	Argument	data3	predictive	Низкий
171	Argument	docDownloadPath/uploadLocation	predictive	Высокий
172	Argument	err	predictive	Низкий
173	Argument	file	predictive	Низкий
174	Argument	filename	predictive	Средний
175	Argument	fromName/message	predictive	Высокий
176	Argument	go	predictive	Низкий
177	Argument	groups	predictive	Низкий
178	Argument	hostname	predictive	Средний
179	Argument	id	predictive	Низкий
180	Argument	ipAddr	predictive	Низкий
181	Argument	IP address	predictive	Средний
182	Argument	item_id	predictive	Низкий
183	Argument	l/dl/del	predictive	Средний
184	Argument	layout	predictive	Низкий
185	Argument	mapTitle	predictive	Средний
186	Argument	mosConfig_absolute_path	predictive	Высокий
187	Argument	name	predictive	Низкий
188	Argument	page	predictive	Низкий
189	Argument	password	predictive	Средний
190	Argument	Password	predictive	Средний
191	Argument	phpbb_root_path	predictive	Высокий
192	Argument	priority	predictive	Средний
193	Argument	reason	predictive	Низкий
194	Argument	redirect	predictive	Средний
195	Argument	redirect_uri	predictive	Средний
196	Argument	Referer	predictive	Низкий
197	Argument	referrer	predictive	Средний
198	Argument	resourceName	predictive	Средний
199	Argument	rootpath	predictive	Средний
200	Argument	sbp	predictive	Низкий
201	Argument	search	predictive	Низкий
202	Argument	searchid	predictive	Средний
203	Argument	sid	predictive	Низкий
204	Argument	site	predictive	Низкий
205	Argument	sms_content	predictive	Средний
206	Argument	sort_by	predictive	Низкий
207	Argument	src	predictive	Низкий
208	Argument	Swfile	predictive	Низкий
209	Argument	sys_name	predictive	Средний
210	Argument	tpldir/filename/type/nid	predictive	Высокий
211	Argument	upfile	predictive	Низкий
212	Argument	uploaddir	predictive	Средний
213	Argument	up_auto_log	predictive	Средний
214	Argument	url	predictive	Низкий
215	Argument	uselang	predictive	Низкий
216	Argument	wd	predictive	Низкий
217	Argument	_receivers	predictive	Средний
218	Input Value	%0a/%0d	predictive	Низкий
219	Input Value	./../../../	predictive	Средний
220	Input Value	1" onmouseover=prompt(947671) bad="	predictive	Высокий
221	Input Value	</script><script>alert(1)</script>	predictive	Высокий
222	Input Value	<ScRiPt >alert(991)</ScRiPt>	predictive	Высокий
223	Input Value	welc0me	predictive	Низкий
224	Input Value	\x3D../../../../etc/passwd	predictive	Высокий
225	Network Port	8888	predictive	Низкий
226	Network Port	tcp/873	predictive	Низкий
227	Network Port	tcp/6200	predictive	Средний

Ссылки (4)

The following list contains external sources which discuss the actor and the associated activities:

◂ ПредыдущийОбзорДалее ▸

Interested in the pricing of exploits?

See the underground prices here!