BlankSlate 分析

💳 Purchase Required

You need to purchase an additional CTI license to see detailed indicators.

IOB - Indicator of Behavior (127)

语言

en	112
de	6
it	4
fr	2
ru	2

国家/地区

gb	76
us	16
it	4
de	4
fr	2

演员

BlankSlate	4
Ave Maria	1
Cerber	1

利益

类型

Not Defined	68
WordPress Plugin	12
Content Management System	4
Peer-to-Peer Software	2
Customer Relationship Management System	2

供应商

Not Defined	40
SourceCodester	12
Wondershare	4
Totolink	4
Chris92de	2

产品

Wondershare MobileTrans	2
uTorrent	2
Chris92de AdminServ	2
Wondershare Dr.Fone	2
Guangdong Pythagorean OA Office System	2

漏洞

#	漏洞	Base	Temp	0day	今天	易	修正	EPSS	CTI	CVE
1	DZCP deV!L`z Clanportal config.php 权限升级	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Official Fix	0.00943	1.15	CVE-2010-0966
2	JetBrains PhpStorm idea.log 信息公开	3.8	3.7	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00043	0.04	CVE-2022-48435
3	Thomas R. Pasawicz HyperBook Guestbook Password Database gbconfiguration.dat Hash 信息公开	5.3	5.2	$5k-$25k	$0-$5k	High	Workaround	0.02016	0.02	CVE-2007-1192
4	All in One SEO Pack Plugin 跨网站脚本	5.1	5.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00076	0.07	CVE-2023-0586
5	PHPGurukul Online Notes Sharing System profile.php 跨网站请求伪造	4.3	4.1	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00052	0.09	CVE-2023-7052
6	Views for WPForms Plugin create_view 跨网站请求伪造	4.3	4.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00052	0.03	CVE-2024-0374
7	All in One SEO Pack Plugin 跨网站脚本	3.9	3.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00101	0.00	CVE-2023-0585
8	SourceCodester Responsive Ordering System Product_model.php 权限升级	6.3	6.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00632	0.03	CVE-2021-25206
9	WPForms Pro Plugin 权限升级	7.6	7.5	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00229	0.08	CVE-2022-3574
10	Wondershare Dr.Fone 权限升级	7.0	6.9	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00082	0.00	CVE-2023-29835
11	Netentsec NS-ASG Application Security Gateway list_addr_fwresource_ip.php SQL注入	5.5	5.4	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00061	0.14	CVE-2023-5681
12	Campcodes Simple Student Information System manage_academic.php SQL注入	6.2	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00064	0.00	CVE-2023-5929
13	Campcodes Simple Student Information System index.php SQL注入	6.2	6.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00064	0.09	CVE-2023-5923
14	CodeAstro Internet Banking System pages_reset_pwd.php 跨网站脚本	4.4	4.3	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00052	0.00	CVE-2023-5695
15	SourceCodester Engineers Online Portal downloadable_student.php SQL注入	7.5	7.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00077	0.04	CVE-2023-5276
16	ZZZCMS Database Backup File save.php restore 权限升级	7.1	6.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00061	0.09	CVE-2023-5263
17	MicroWorld eScan Anti-Virus runasroot Local Privilege Escalation	7.8	7.6	$5k-$25k	$0-$5k	Proof-of-Concept	Not Defined	0.00042	0.10	CVE-2023-4383
18	Lightxun IPTV Gateway web_upload_template.html 权限升级	5.0	4.9	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00063	0.05	CVE-2023-7026
19	SourceCodester Best Courier Management System manage_parcel_status.php 跨网站脚本	4.1	4.0	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00050	0.14	CVE-2023-5273
20	7-card Fakabao wxpay_notify.php SQL注入	6.6	6.4	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00064	0.09	CVE-2023-7185

IOC - Indicator of Compromise (9)

These indicators of compromise highlight associated network ressources which are known to be part of research and attack activities.

ID	IP地址	Hostname	参与者	Identified	类型	可信度
1	19.48.17.0		BlankSlate	2022-04-01	verified	高
2	54.68.27.226	ec2-54-68-27-226.us-west-2.compute.amazonaws.com	BlankSlate	2022-04-01	verified	中
3	XX.XX.XX.X	xxxxxxx-xxx-xxx-xxx-xxx.xx.xx.xxxx.xxxxxxxxxx.xx	Xxxxxxxxxx	2022-04-01	verified	高
4	XX.XX.XXX.X	xxx.xx-xx-xx-xxx.xx	Xxxxxxxxxx	2022-04-01	verified	高
5	XXX.XX.XXX.XX		Xxxxxxxxxx	2022-04-01	verified	高
6	XXX.XXX.X.XXX	xxx.x.xxx.xxx.xx.xxxxxxxxxxxxxxxxx.xxx	Xxxxxxxxxx	2022-04-01	verified	中
7	XXX.XXX.XXX.X	xxx.xxxx.xxx.xxxx.xxxxxxx	Xxxxxxxxxx	2022-04-01	verified	高
8	XXX.XXX.XXX.X	xxx.xx-xxx-xxx-xxx.xx	Xxxxxxxxxx	2022-04-01	verified	高
9	XXX.XXX.XXX.X		Xxxxxxxxxx	2022-04-01	verified	高

TTP - Tactics, Techniques, Procedures (14)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	漏洞	访问向量	类型	可信度
1	T1006	CWE-22, CWE-24	Path Traversal	predictive	高
2	T1040	CWE-294	Authentication Bypass by Capture-replay	predictive	高
3	T1055	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	高
4	TXXXX	CWE-XX	Xxxxxxxx Xxxxxxxxx	predictive	高
5	TXXXX.XXX	CWE-XX, CWE-XX	Xxxxx Xxxx Xxxxxxxxx	predictive	高
6	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
7	TXXXX	CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
8	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	高
9	TXXXX	CWE-XX	Xxx Xxxxxxxxx	predictive	高
10	TXXXX	CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
11	TXXXX	CWE-XXX	Xxxxxxxxx Xxxxxx Xxxx	predictive	高
12	TXXXX	CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
13	TXXXX.XXX	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	高
14	TXXXX.XXX	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高

IOA - Indicator of Attack (119)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	分类	Indicator	类型	可信度
1	File	/admin/index.php	predictive	高
2	File	/admin/list_addr_fwresource_ip.php	predictive	高
3	File	/admin/makehtml_freelist_action.php	predictive	高
4	File	/admin/return_add.php	predictive	高
5	File	/admin/save.php	predictive	高
6	File	/admin/service/stop/	predictive	高
7	File	/admin/students/manage_academic.php	predictive	高
8	File	/api/v1/attack/falco	predictive	高
9	File	/application/websocket/controller/Setting.php	predictive	高
10	File	/cgi-bin/cstecgi.cgi	predictive	高
11	File	/cgi-bin/login_action.cgi	predictive	高
12	File	/event/admin/?page=user/list	predictive	高
13	File	/include/file.php	predictive	高
14	File	/index.php	predictive	中
15	File	/index.php?menu=asterisk_cli	predictive	高
16	File	/xxxx/xxxxx/xxxxxx	predictive	高
17	File	/xxxxxxxxxxxxxxx	predictive	高
18	File	/xxxxxxxx/xxxx	predictive	高
19	File	/xxxxxxx/	predictive	中
20	File	/xxxx/xxxxxxx.xxx	predictive	高
21	File	/xxxxxxxxxx.xxx	predictive	高
22	File	/xxxxxx/xxxxx.xxx/xxxxx/xxxxx/xxx_xxxxxx_xxxxxxxx.xxxx	predictive	高
23	File	xxxxxxxxxxxx.xxx	predictive	高
24	File	xxxxx/xxx_xxxxxxxx.xxx	predictive	高
25	File	xxxxx/xxxxxxxxxx/xxxxxxx.xxx	predictive	高
26	File	xxx/xxxxxx/xxxxxx.xxx	predictive	高
27	File	xxx/xxxxx/xxxxxxxxxx/xxxx.xxx	predictive	高
28	File	xxx/xxxx/xxxxx/xxxx.xxx	predictive	高
29	File	xxxxxxx.xxx	predictive	中
30	File	xxxxxxx.xxx	predictive	中
31	File	xxxxxxx.xxx	predictive	中
32	File	xxxxxx-xxxxxxx.xxx	predictive	高
33	File	xxxxxxxxxx.xxx	predictive	高
34	File	xxxxxxxx_xxxxxxx.xxx	predictive	高
35	File	xxxx/xx-xxxxxxx.xxx	predictive	高
36	File	xxxx/xxxxxxxxxxxxxxx.xxx	predictive	高
37	File	xxxxxxx.xxx	predictive	中
38	File	xxxxxxxxxxxx_xxxxxxx.xxx	predictive	高
39	File	xxxxxx_xxxxx_xxxxxxxx.xxx	predictive	高
40	File	xxxxxxx/xxxx-xxxxx-xxxxxx.xxx	predictive	高
41	File	xxxxxxx/xxxx-xxxxx-xxxxxx.xxx?xxxxxx=x	predictive	高
42	File	xxxx.xxx	predictive	中
43	File	xxx/xxxxxxx/xxxxxxxxxxxxxx.x	predictive	高
44	File	xxxxxxxx/xxxxx.xxx	predictive	高
45	File	xxxx.xxx	predictive	中
46	File	xxx/xxxxxx.xxx	predictive	高
47	File	xxx/xxxxxxxxxxx/xxxxxxx.xxx	predictive	高
48	File	xxxxx.xxx	predictive	中
49	File	xx/xxxxxxx.x	predictive	中
50	File	xxxxx/xxxx.xxx	predictive	高
51	File	xxxx_xxxx_xxxxxx.xxx	predictive	高
52	File	xxx.x/xxxxxx.x	predictive	高
53	File	xxxxxx/xxx/xxxxxxxxxxx/xxxx_xxxxxxxxxx.xx	predictive	高
54	File	xxxxxxxxxx.xxx	predictive	高
55	File	xxxxxx_xxxxxx_xxxxxx.xxx	predictive	高
56	File	xxxxxxxxxxx_xxxxx_xxxxxxxx.xxx	predictive	高
57	File	xxxxxxxxx.xxx	predictive	高
58	File	xxxxx_xxxxx_xxx.xxx	predictive	高
59	File	xxxxxxx.xxx	predictive	中
60	File	xxxxxxx/xxxxxx-xxxxxxx-xxxx-xxxx.xxxx	predictive	高
61	File	xxxxxxx_xxxxx.xxx	predictive	高
62	File	xxxxxxxx_xxxxx_xxxxxxxx.xxx	predictive	高
63	File	xxxxxxxxx/xxxx/xxxxxxxxx.xxx	predictive	高
64	File	xxxx/xxxx/	predictive	中
65	File	xxxxxxxxx	predictive	中
66	File	xxxx/xxxxx_xxxxxx.xxx	predictive	高
67	File	xxxxxx_xxxxxxx.xxx	predictive	高
68	File	xxx/xxxxxxxxx/xxxxxxxxxxxxx/xxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxx.xxx	predictive	高
69	File	xxxxxx_xxx_xxxxx_xxx.xxx	predictive	高
70	File	xxxxxxxx/xxxxx/xxx_xxx.xxx	predictive	高
71	File	xxxx_x_xxxx.xxx	predictive	高
72	File	xxxxx/xxxx_xxxx.xxx	predictive	高
73	Library	xxx.xxx	predictive	低
74	Argument	$xxxx["xx"]	predictive	中
75	Argument	$_xxxxxx['xxx_xxxx']	predictive	高
76	Argument	$_xxxxxx['xxxxxx_xxxx']	predictive	高
77	Argument	xxxxxx	predictive	低
78	Argument	xxxxxx	predictive	低
79	Argument	xxxxxxxx	predictive	中
80	Argument	xxxxxxx	predictive	低
81	Argument	xxxxxxxxxxxxxx	predictive	高
82	Argument	x_xxxxxx	predictive	中
83	Argument	xxxxxxxxxxx	predictive	中
84	Argument	xxx_xxxx	predictive	中
85	Argument	xxxxxxxx	predictive	中
86	Argument	xxxxxx	predictive	低
87	Argument	xxxxxxxxxxxx	predictive	中
88	Argument	xxxxx	predictive	低
89	Argument	xxxxx/xxxxxxx/xxx/xx	predictive	高
90	Argument	xxxxx_xxxxxxx	predictive	高
91	Argument	xxxxx	predictive	低
92	Argument	xxxx	predictive	低
93	Argument	xxxxx xxxx/xxxx xxxx	predictive	高
94	Argument	xxxxx	predictive	低
95	Argument	xxxx_xxxx	predictive	中
96	Argument	xx	predictive	低
97	Argument	xxx_xxx_xxxxx	predictive	高
98	Argument	xxxxxx	predictive	低
99	Argument	xxxx	predictive	低
100	Argument	xxxx	predictive	低
101	Argument	xxxxxxxx	predictive	中
102	Argument	xxx_xxxxx_xx	predictive	中
103	Argument	xxxxxxxxxx/xxxx/xxxxxxxx/xxxx/xxxxxxx_xxxx	predictive	高
104	Argument	xxxxxxxx	predictive	中
105	Argument	xxxxxxxx	predictive	中
106	Argument	xxxx_xxxx	predictive	中
107	Argument	xxxxxxx	predictive	低
108	Argument	xxxxxxx	predictive	低
109	Argument	xxx	predictive	低
110	Argument	xxxxxxx	predictive	低
111	Argument	xxxxxxx	predictive	低
112	Argument	xxxx_xxxx	predictive	中
113	Argument	x_xxxx/x_xxxx	predictive	高
114	Argument	xxx	predictive	低
115	Argument	xxxxxxxx/xxxxxxxx	predictive	高
116	Input Value	(xxxxxxxxx(xxxx,xxxxxx(xxxx,xxxxxxxxxxxx,(xxxxxx (xxx(xxxx=xxxx,x))),xxxxxxxxxxxx),xxxx))	predictive	高
117	Input Value	<xxxxxx>xxxxx(xxxxxxxx.xxxxxx)</xxxxxx>	predictive	高
118	Input Value	xxxxxxx%xxxxxxxxx.xxx'%xx%xx<xxxxxx%xx>xxxxx(xxxx)</xxxxxx>	predictive	高
119	Network Port	xxx/xx (xxx)	predictive	中

参考 (3)

The following list contains external sources which discuss the actor and the associated activities:

◂ 上一步一览下一步 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!