Tomcat takeover .pcap file analysis lab
Tags
attack-pattern: Credentials - T1589.001 Cron - T1053.003 Dns - T1071.004 Dns - T1590.002 Exploits - T1587.004 Exploits - T1588.005 Inter-Process Communication - T1559 Malicious File - T1204.002 Server - T1583.004 Server - T1584.004 Ssh - T1021.004 Tool - T1588.002 Vulnerabilities - T1588.006 Default Credentials
Show in Graph
Common Information
Type Value
UUID 2eb46320-58a4-4a1e-a71c-7ad354298bd5
Fingerprint 9133b908e5a39ac5
Analysis status DONE
Considered CTI value 0
Text language
Published Oct. 27, 2024, 8:09 p.m.
Added to db Oct. 27, 2024, 10:14 p.m.
Last updated Nov. 18, 2024, 3:36 a.m.
Headline Tomcat takeover .pcap file analysis lab
Title Tomcat takeover .pcap file analysis lab
Detected Hints/Tags/Attributes 38/1/10
Source URLs
Redirection Url
Details Source https://medium.com/@bluerivercs/tomcat-takeover-pcap-file-analysis-lab-3ad666df90e5?source=rss------cybersecurity-5
URL Provider
Details Provider Source level domain
Details medium.com medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 46 
cyberdefenders.org
Details Domain 2 
www.garykessler.net
Details Domain 1 
abuseipbd.com
Details File 2 
work_report2023.pdf
Details IPv4 3 
14.0.0.120
Details IPv4 3 
10.0.0.112
Details IPv4 3 
10.0.0.115
Details IPv4 3 
10.0.0.105
Details IPv4 1 
105.0.0.105
Details IPv4 3 
10.0.0.120