PowerTrick Analys

IOB - Indicator of Behavior (1000)

Tidslinje

Lang

de622
en354
ru8
pl4
fr2

Land

de762
es238

Skådespelare

Aktiviteter

Intressera

Tidslinje

Typ

Säljare

Produkt

Apache HTTP Server22
Google Android16
Microsoft Windows14
Google Chrome12
Magento8

Sårbarheter

#SårbarhetBaseTemp0dayI dagUtnRemEPSSCTICVE
1Free GDPR Consent Solution Plugin Admin Dashboard cross site scripting3.53.4$0-$5k$0-$5kNot DefinedOfficial Fix0.001000.00CVE-2022-0147
2Traccar GPS Tracking System LDAP Search Filter LDAP injection privilegier eskalering7.56.6$0-$5k$0-$5kNot DefinedOfficial Fix0.000480.00CVE-2020-5246
3Unreal UnrealIRCd IP Cloaking Feature cloak.c IP Address informationsgivning5.35.1$0-$5k$0-$5kNot DefinedOfficial Fix0.007750.03CVE-2004-0679
4Oracle Secure Backup Apache förnekande av tjänsten7.57.0$5k-$25k$0-$5kHighOfficial Fix0.963850.02CVE-2011-3192
5Symantec ASG/ProxySG FTP Proxy WebFTP Mode Stored cross site scripting5.75.4$5k-$25k$0-$5kNot DefinedOfficial Fix0.001150.00CVE-2018-18370
6versatileBulletinBoard dereferrer.php cross site scripting3.53.3$0-$5k$0-$5kProof-of-ConceptNot Defined0.000000.02
7McAfee WebAdvisor Browser Extension Settings privilegier eskalering6.96.9$5k-$25k$5k-$25kNot DefinedNot Defined0.001500.03CVE-2022-0815
8Hotel Druid SQLite sql injektion6.36.1$0-$5k$0-$5kNot DefinedNot Defined0.001860.00CVE-2021-37832
9cURL/libcURL Referer informationsgivning4.34.1$0-$5k$0-$5kNot DefinedOfficial Fix0.009270.02CVE-2021-22876
10PostgreSQL sql injektion5.65.4$0-$5k$0-$5kNot DefinedOfficial Fix0.001950.02CVE-2021-23214
11Cisco IOS XE H.323 Application Level Gateway privilegier eskalering4.54.4$25k-$100k$0-$5kNot DefinedOfficial Fix0.001070.00CVE-2021-1616
12Schneider Electric AP7xxxx/AP8xxx/APDU9xxx URL informationsgivning4.34.1$0-$5k$0-$5kNot DefinedOfficial Fix0.001040.03CVE-2021-22825
13Cisco IOS XR Ethernet Frame förnekande av tjänsten6.56.2$5k-$25k$0-$5kNot DefinedOfficial Fix0.000510.00CVE-2021-34713
14Technicolor TC7337 Backup File backupsettings.conf Credentials informationsgivning6.46.4$0-$5k$0-$5kNot DefinedNot Defined0.004850.02CVE-2020-11449
15PhpWiki ldap.php svag autentisering9.88.8$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.015800.00CVE-2007-3193
16QuickBox Pro cross site scripting3.53.5$0-$5k$0-$5kNot DefinedNot Defined0.000780.00CVE-2021-45281
17Mahavitaran App URL Parameter informationsgivning4.74.7$0-$5kBeräknandeNot DefinedNot Defined0.001480.00CVE-2020-27414
18Veritas InfoScale Operations Manager GET Parameter listdir.pl cross site scripting3.63.5$0-$5k$0-$5kNot DefinedOfficial Fix0.000540.00CVE-2022-26483
19Apple iOS/iPadOS FaceTime informationsgivning7.57.2$25k-$100k$5k-$25kNot DefinedOfficial Fix0.004530.00CVE-2019-8830
20Apache Traffic Server Request Line Parser privilegier eskalering5.55.3$5k-$25k$0-$5kNot DefinedOfficial Fix0.001550.00CVE-2021-44040

IOC - Indicator of Compromise (2)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

IDIP-adressHostnameSkådespelareKampanjerIdentifiedTypFörtroende
15.9.161.246static.246.161.9.5.clients.your-server.dePowerTrick31/05/2021verifiedHög
2XXX.XX.XX.XXxxxxxxxx.xx-xxx-xx-xx.xxxXxxxxxxxxx31/05/2021verifiedHög

TTP - Tactics, Techniques, Procedures (23)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

IDTechniqueKlassSårbarheterÅtkomstvektorTypFörtroende
1CAPEC-10CWE-17, CWE-19, CWE-20, CWE-74, CWE-93, CWE-99, CWE-119, CWE-120, CWE-121, CWE-122, CWE-125, CWE-189, CWE-190, CWE-191, CWE-266, CWE-275, CWE-285, CWE-287, CWE-290, CWE-306, CWE-345, CWE-346, CWE-347, CWE-352, CWE-362, CWE-371, CWE-377, CWE-399, CWE-400, CWE-404, CWE-407, CWE-415, CWE-416, CWE-417, CWE-444, CWE-476, CWE-502, CWE-610, CWE-611, CWE-617, CWE-639, CWE-665, CWE-693, CWE-707, CWE-732, CWE-769, CWE-772, CWE-787, CWE-824, CWE-843, CWE-862, CWE-863, CWE-908, CWE-918, CWE-942Unknown VulnerabilitypredictiveHög
2T1006CAPEC-126CWE-21, CWE-22Path TraversalpredictiveHög
3T1040CAPEC-114CWE-287, CWE-294, CWE-310, CWE-319Authentication Bypass by Capture-replaypredictiveHög
4T1055CAPEC-10CWE-74, CWE-707Improper Neutralization of Data within XPath ExpressionspredictiveHög
5T1059CAPEC-10CWE-74, CWE-94, CWE-707Argument InjectionpredictiveHög
6TXXXX.XXXCAPEC-10CWE-XX, CWE-XX, CWE-XX, CWE-XXXXxxxx Xxxx XxxxxxxxxpredictiveHög
7TXXXXCAPEC-122CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxx Xxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveHög
8TXXXX.XXXCAPEC-0CWE-XXX, CWE-XXXXxx Xx Xxxx-xxxxx XxxxxxxxpredictiveHög
9TXXXX.XXXCAPEC-16CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXXXxxx-xxxxx XxxxxxxxxxxpredictiveHög
10TXXXXCAPEC-10CWE-XX, CWE-XX, CWE-XX, CWE-XXXXxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx XxxxxxxxxpredictiveHög
11TXXXX.XXXCAPEC-178CWE-XXXXxxx XxxxxxxxpredictiveHög
12TXXXXCAPEC-0CWE-XXX7xx Xxxxxxxx XxxxxxxxpredictiveHög
13TXXXXCAPEC-1CWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxxx XxxxxxpredictiveHög
14TXXXXCAPEC-10CWE-XX, CWE-XX, CWE-XX, CWE-XXXXxx XxxxxxxxxpredictiveHög
15TXXXX.XXXCAPEC-1CWE-XXX, CWE-XXXXxxxxxxx XxxxxxxxxxxxxpredictiveHög
16TXXXXCAPEC-112CWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxxxx XxxxxxxxxxpredictiveHög
17TXXXX.XXXCAPEC-220CWE-XXXXxxxxxxxx XxxxxxxxxpredictiveHög
18TXXXX.XXXCAPEC-114CWE-XXX, CWE-XXXXxxxxxxx Xxxxxxxxxxx XxxxxxxxxxpredictiveHög
19TXXXXCAPEC-116CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx XxxxxxxxxxxpredictiveHög
20TXXXX.XXXCAPEC-0CWE-XXXxxxxxxxxxxxxpredictiveHög
21TXXXXCAPEC-157CWE-XXX, CWE-XXXXxxxxxxxxxxxx XxxxxxpredictiveHög
22TXXXX.XXXCAPEC-0CWE-XXXXxx Xxxxxxxxxx XxxxxpredictiveHög
23TXXXX.XXXCAPEC-19CWE-XXX, CWE-XXX, CWE-XXXXxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx XxxxxxxxxpredictiveHög

IOA - Indicator of Attack (232)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

IDKlassIndicatorTypFörtroende
1File/admin/config.php?display=disa&view=formpredictiveHög
2File/apps/acs-commons/content/page-compare.htmlpredictiveHög
3File/cgi/get_param.cgipredictiveHög
4File/edit-db.phppredictiveMedium
5File/files/passwordpredictiveHög
6File/guest_auth/cfg/upLoadCfg.phppredictiveHög
7File/hocms/classes/Master.php?f=delete_memberpredictiveHög
8File/lists/admin/predictiveHög
9File/phppath/phppredictiveMedium
10File/services/getFile.cmdpredictiveHög
11File/sns/classes/Master.php?f=delete_imgpredictiveHög
12File/usr/bin/pkexecpredictiveHög
13File/v2/quantum/save-data-upload-big-filepredictiveHög
14File/var/log/messagespredictiveHög
15File/web/jquery/uploader/multi_uploadify.phppredictiveHög
16File/webconsole/ControllerpredictiveHög
17File/wordpress/wp-admin/admin.php?page=weblib-circulation-desk&orderby=title&order=DESCpredictiveHög
18Fileabook_database.phppredictiveHög
19Fileacl/save_user.cgipredictiveHög
20Fileadaptive-images-script.phppredictiveHög
21Fileadmin/auth.phppredictiveHög
22Fileadmin/cgi-bin/listdir.plpredictiveHög
23Fileadminuseredit.php?usertoedit=XSSpredictiveHög
24FileAvastSvc.exepredictiveMedium
25Filebackupsettings.confpredictiveHög
26Filebase/ErrorHandler.phppredictiveHög
27Filexxx/xxxx.xpredictiveMedium
28Filexxxx/xxx/predictiveMedium
29Filexxx-xxx/xxxxx.xxxpredictiveHög
30Filexxxx_xxxx.xxxpredictiveHög
31Filexxxxx.xpredictiveLåg
32Filexxx.xxxpredictiveLåg
33Filexxx.xxx?xxx=xxxxx_xxxxpredictiveHög
34Filexxxxxx/xxxx.xpredictiveHög
35Filexxxxxx/xxx.xpredictiveMedium
36Filexxxxxx/xxxx.xpredictiveHög
37Filexxxxxx\xxx.xpredictiveMedium
38Filexxx.xxxxx.xxxxxxx.xxxxxxxxxxxxxx.xxx.xxxxxxx.xxxxxxxxxxxxxxxxxxpredictiveHög
39Filexxxxxx/xxxxx/xxxxxxx.xpredictiveHög
40Filexxxxxxx.xxxpredictiveMedium
41Filexxxxxxx.xxxpredictiveMedium
42Filex_xxxxxxxxxxx.xxxxpredictiveHög
43Filexxxxx_xxxxxx.xpredictiveHög
44Filexxxxxxxxxxxx.xxxpredictiveHög
45Filexxxxxxxxx.xxxpredictiveHög
46Filexxxxxxxxxx.xxxpredictiveHög
47Filexxxxxxxxxxx.xxxpredictiveHög
48Filexxxxxxx/xxx/xxx_xxx.xpredictiveHög
49Filexxxxx.xxxpredictiveMedium
50Filexxxx/xxxxxxxxxx/xxxx-xxx.xpredictiveHög
51Filexxxx/xxxxxxxxxx/xxxxxx-xxxxxx.xpredictiveHög
52Filexxxxxx.xxx.xxxpredictiveHög
53Filexxxxxxxxxxxxxx.xxxpredictiveHög
54Filexxxxx.xxxxpredictiveMedium
55Filexxxxxxxx.xpredictiveMedium
56Filexxxxxxxxx.xxxpredictiveHög
57Filexxxxxxxxxx\xxxxxx\xxxxxxxxxxxxx.xxxpredictiveHög
58Filexxxxxx/xxxxx_xxxxxxx.xxxpredictiveHög
59Filexxxx/xxx_xxx_xxxxx.xpredictiveHög
60Filexxxxxx_xxx.xpredictiveMedium
61Filexxxxxx/xxxxxpredictiveMedium
62Filexxxxxxx/xxx_xxxxxxxx.xxxpredictiveHög
63Filexxxxx.xxxpredictiveMedium
64Filexxxxx.xxx/xxxxx/xxxxxxxxxxxpredictiveHög
65Filexxxxx.xxx/xxxxxxxx/xxxxxxxx/predictiveHög
66Filexxxxx.xxx/xxxxxxxxx/xxxxxx/xxxxxxxxxxxxx/xxxxxxxxxxx/xxxxxxxpredictiveHög
67Filexxxxxxxxx\xxxxxx\xxxx_xxxxx_xxxxx.xxxpredictiveHög
68Filexxxxxxxx/xxxxxxxx_xxxxxxx_xxxxxx/xxxxx.xxxpredictiveHög
69Filexxxx_xxx.xxxpredictiveMedium
70Filexxxxxxxxxxx/xxxxx-xxxx/xxxx/xxxx/xxxx-xxxxxxx-xxxxx.xpredictiveHög
71Filexxxxxxx/xxxxx.xpredictiveHög
72Filexxxxxxxxx/xxxx-xxxxxxxx.xpredictiveHög
73Filexxxxxxxxx/xxx.xpredictiveHög
74Filexxxxxxx.xpredictiveMedium
75Filexxxxxxx/xxxxxxxx.xpredictiveHög
76Filexxxxxxx.xxxpredictiveMedium
77Filexxxxxx/xxxxxxxxxxx.xxxpredictiveHög
78Filexxxxxxxx.xxxpredictiveMedium
79Filexxxxxxx/xxxxxxxxxxxxpredictiveHög
80Filexx_xxxxxx.xxxpredictiveHög
81Filexxxxxx/xxxxxx_xxxx.xxxpredictiveHög
82Filexxxx/xxxxxxx/xxxxxxx_xxx.xxxxxxxpredictiveHög
83Filexxxx/xxxxx/xxxxxxx.xpredictiveHög
84Filexxx_xxxxx_xxxxx.xpredictiveHög
85Filexxx.xxxxxx_xxxxpredictiveHög
86Filexxxx.xpredictiveLåg
87Filexxxxx.xxxpredictiveMedium
88Filexxx.xxxxx.xxxpredictiveHög
89Filexxxxx/_xxxxx.xxpredictiveHög
90Filexxxxxxxx.xxxpredictiveMedium
91Filexxxxxxxxxxxxxx.xxxpredictiveHög
92Filexxxxxx.xxxpredictiveMedium
93Filexxxxxxx/xxxxxxxx/xxxxxx-xxxxxx-xx-xx.xpredictiveHög
94Filexxxxxxxxx/xxxxxxxxx_xxxxxxxx.xxpredictiveHög
95Filexxxxxxx.xxxpredictiveMedium
96Filexxxxxxx.xxxpredictiveMedium
97Filexxxxxx/xxx/xxxxxxxx/xxxxx/xxxxx_xxxx.xxpredictiveHög
98Filexxxxxxxx/xx/xxxxxxxxxxpredictiveHög
99Filexxxxxx.xxpredictiveMedium
100Filexxxx_xxxx.xxxpredictiveHög
101Filexxxxxxxx.xxxpredictiveMedium
102Filexxxxxxxx.xxxpredictiveMedium
103Filexxxxxxx_xxxxxxx.xxxpredictiveHög
104Filexxxxxxxx.xxxpredictiveMedium
105Filexxxx/xxxxx/xxxx.xxpredictiveHög
106Filexxxx_xxxxxxx.xxxpredictiveHög
107Filexxxxxx.xxxpredictiveMedium
108Filexxxxxxxx-xxxxxx_xxxxx.xxxpredictiveHög
109Filexxxxxxxxx-xxxxxxxxxxxx-xxx/xxxx/xxxxx-xxxx.xxxpredictiveHög
110Filexxxxx/xxxx/xxxxx.xpredictiveHög
111Filexxxxxxxxxx.xxxxpredictiveHög
112Filexxx_xxxxx.xpredictiveMedium
113Filexxxxxxxxxx.xxxpredictiveHög
114Filexxxxxx-xxxxxx.xxpredictiveHög
115Filexxxxxxx/_/xxxxxxxxx/predictiveHög
116Filexxxxxxxx.xxxpredictiveMedium
117Filexxxxxx/xxxxxx/xxxx/xxxxxx/xxxxxxxxxxx.xxxpredictiveHög
118Filexxxxx.xxxpredictiveMedium
119Filexx-xxxxxxx/xxxxxxxpredictiveHög
120Filexx-xxxxxxxxx.xxxpredictiveHög
121File\xxx.\xxxxx\xxxxxxxxxxx\xx.xxxpredictiveHög
122File_x_/xxxx/_x_/xxx/xxxxxx_xxxxxxxxxxxxxpredictiveHög
123File~/xxxx-xxxxx-xxxxxxx.xxxpredictiveHög
124Libraryxxxx.xxxpredictiveMedium
125Libraryxxx/xxxxxx.xpredictiveMedium
126Libraryxxx/xx/xxxxxxx.xxpredictiveHög
127Libraryxxx/xxxxxx.xpredictiveMedium
128Libraryxxx/xxx.xpredictiveMedium
129Libraryxxx/xxxxxxxx/xxxx.xxxpredictiveHög
130Libraryxxxxxxxx.xxxpredictiveMedium
131Libraryxxxxxx.xxxpredictiveMedium
132Libraryxxxxxxx.xxxpredictiveMedium
133Libraryxxxxxxxx/xxxxxxxxx/xxxxxxxxx.xxxpredictiveHög
134Libraryxxxxxx.xxxpredictiveMedium
135LibraryxxxxxxpredictiveLåg
136Argument$xxxxxxx['xxxxxxxx-xxxxxx-xxxxxxxx']predictiveHög
137Argument:$xxxxpredictiveLåg
138Argumentx/xpredictiveLåg
139ArgumentxxxxxxpredictiveLåg
140ArgumentxxxxxpredictiveLåg
141ArgumentxxpredictiveLåg
142Argumentxxxx_xxxxpredictiveMedium
143Argumentxxxx_xxxxpredictiveMedium
144ArgumentxxxxpredictiveLåg
145Argumentxxx_xxx_xx_xxx_xxxxxxxxxx_xpredictiveHög
146Argumentxxxx-xxxxxpredictiveMedium
147Argumentxxxxxxx_xxxxxpredictiveHög
148Argumentxxxxxxx-xxxxpredictiveMedium
149Argumentxxxxxxxxxxxx$xxxxxxpredictiveHög
150Argumentxxx_xxxpredictiveLåg
151ArgumentxxxxxxpredictiveLåg
152ArgumentxxxxxxxxxxxpredictiveMedium
153ArgumentxxxxxxxpredictiveLåg
154ArgumentxxxxxpredictiveLåg
155Argumentxxxx[xxxxxxx]predictiveHög
156ArgumentxxxxxxxpredictiveLåg
157ArgumentxxxxpredictiveLåg
158ArgumentxxxxxxxxpredictiveMedium
159ArgumentxxxxxxxxpredictiveMedium
160ArgumentxxxxxxxxxxxpredictiveMedium
161Argumentxxxx/xxxxxxx/xxx/xxxxxxxxxpredictiveHög
162Argumentxxxxxxx/xxxxxxpredictiveHög
163ArgumentxxxxxpredictiveLåg
164ArgumentxxxxxxpredictiveLåg
165Argumentxxxx_xxxxxpredictiveMedium
166ArgumentxxxxpredictiveLåg
167ArgumentxxxxpredictiveLåg
168Argumentxxxx_xxxxxxxpredictiveMedium
169ArgumentxxpredictiveLåg
170Argumentxx=predictiveLåg
171ArgumentxxxxxxxxxxxxxxpredictiveHög
172Argumentxxxxx_xxxpredictiveMedium
173Argumentxxxx_xxx_xxxxxx/xxxx_xxx_xxxxxx/xxxx_xxx_xxxxxx/xxxx_xxx_xxxxxxpredictiveHög
174ArgumentxxxxxxxpredictiveLåg
175ArgumentxxxxpredictiveLåg
176ArgumentxxxxxxxxpredictiveMedium
177ArgumentxxxxxxxpredictiveLåg
178Argumentxxxxx xxxxpredictiveMedium
179Argumentxxxxxxx/xxxxxx_xxpredictiveHög
180Argumentxxxx_xxxpredictiveMedium
181Argumentxxxxx_xxxx/xxxxx_xxxxxxxpredictiveHög
182ArgumentxxxxpredictiveLåg
183ArgumentxxxxpredictiveLåg
184ArgumentxxxxxxpredictiveLåg
185Argumentxxxxx/xxxxxxxpredictiveHög
186ArgumentxxxxxxxpredictiveLåg
187ArgumentxxxxpredictiveLåg
188Argumentxxxx xxxxpredictiveMedium
189ArgumentxxxxxxpredictiveLåg
190ArgumentxxxxpredictiveLåg
191Argumentxxxx_xxpredictiveLåg
192ArgumentxxxxxpredictiveLåg
193Argumentxxxxx_xxxxxxpredictiveMedium
194Argumentxxxxxxxx_xxpredictiveMedium
195ArgumentxxxxxxxpredictiveLåg
196Argumentxxxxxxxx_xxxxxxxxxxxx_xxxxxpredictiveHög
197ArgumentxxxxpredictiveLåg
198Argumentxxxxxxxx_xxxxxpredictiveHög
199Argumentxxxxxx_xxpredictiveMedium
200Argumentxxxx-xxxxxxxxxxxx-xxxxx-xxpredictiveHög
201ArgumentxxxpredictiveLåg
202Argumentxxxxx_xxpredictiveMedium
203ArgumentxxxpredictiveLåg
204ArgumentxxxxxxxxxpredictiveMedium
205ArgumentxxxxxxpredictiveLåg
206Argumentxx_xxpredictiveLåg
207ArgumentxxxxxxxxpredictiveMedium
208ArgumentxxxxxxxxpredictiveMedium
209ArgumentxxxxxpredictiveLåg
210Argumentxxxxx/xxxpredictiveMedium
211ArgumentxxxxxxxxpredictiveMedium
212Argumentxx_xxxxxxxxxxxxx_xxx[xxxxxx][xxxxxxx]predictiveHög
213ArgumentxxxxpredictiveLåg
214Argumentxxxxxxxxx[xxxxx]predictiveHög
215ArgumentxxxpredictiveLåg
216ArgumentxxxxxxxxpredictiveMedium
217ArgumentxxxxxxxxpredictiveMedium
218ArgumentxxxxxpredictiveLåg
219ArgumentxxxxxpredictiveLåg
220ArgumentxxxxxpredictiveLåg
221Argumentx-xxxxxxxxx-xxxpredictiveHög
222Input Value/..predictiveLåg
223Input Value//predictiveLåg
224Input ValuexxxxxxxxpredictiveMedium
225Input Value<xxx>/*.xxxxx/predictiveHög
226Input Valuexxxxxx.xxxpredictiveMedium
227Input ValuexxxxxpredictiveLåg
228Input Valuex=xpredictiveLåg
229Patternxxxx_xxxxxx_xxxxxxxxx.xxx_xxxxxx_xxxxx_xxxxxxxxpredictiveHög
230Network Portxxx/xx (xxx)predictiveMedium
231Network Portxxx/xxxpredictiveLåg
232Network Portxxx/xxxpredictiveLåg

Referenser (2)

The following list contains external sources which discuss the actor and the associated activities:

Want to stay up to date on a daily basis?

Enable the mail alert feature now!