My PoC walk through for CVE-2018–6789
Tags
| attack-pattern: | Data Python - T1059.006 Server - T1583.004 Server - T1584.004 Brute Force - T1110 |
Common Information
| Type | Value |
|---|---|
| UUID | 98b77da2-32dc-47cc-bce4-3980a0297d88 |
| Fingerprint | 38b11d17ed3fe52c |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | May 2, 2018, 5:10 p.m. |
| Added to db | Feb. 18, 2023, 12:14 a.m. |
| Last updated | Nov. 17, 2024, 11:40 p.m. |
| Headline | My PoC walk through for CVE-2018–6789 |
| Title | My PoC walk through for CVE-2018–6789 |
| Detected Hints/Tags/Attributes | 45/1/14 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 11 | cve-2018-6789 |
|
| Details | Domain | 1175 | gmail.com |
|
| Details | Domain | 4128 | github.com |
|
| Details | Domain | 10 | test.example.com |
|
| Details | Domain | 1 | pwned.com |
|
| Details | Domain | 13 | devco.re |
|
| Details | 1 | straightblast426@gmail.com |
||
| Details | 1 | test@pwned.com |
||
| Details | 1 | shell@pwned.com |
||
| Details | Github username | 2 | exim |
|
| Details | IPv4 | 25 | 172.17.0.1 |
|
| Details | IPv4 | 1 | 192.168.0.160 |
|
| Details | IPv4 | 1 | 192.168.0.159 |
|
| Details | Url | 4 | https://devco.re/blog/2018/03/06/exim-off-by-one-rce-exploiting-cve-2018-6789-en |