LiderAhenk 0day - All your PARDUS Clients Belongs To Me (CVE-2021-3825) - PRODAFT
Tags
attack-pattern: | Credentials - T1589.001 Python - T1059.006 Server - T1583.004 Server - T1584.004 Software - T1592.002 |
Common Information
Type | Value |
---|---|
UUID | ba843977-9c62-41ab-921b-82d0da2c59e1 |
Fingerprint | b1f95911a905e3ff |
Analysis status | DONE |
Considered CTI value | 0 |
Text language | |
Published | Sept. 21, 2021, midnight |
Added to db | June 1, 2023, 10:45 a.m. |
Last updated | Nov. 17, 2024, 11:40 p.m. |
Headline | LiderAhenk 0day - All your PARDUS Clients Belongs To Me (CVE-2021-3825) |
Title | LiderAhenk 0day - All your PARDUS Clients Belongs To Me (CVE-2021-3825) - PRODAFT |
Detected Hints/Tags/Attributes | 30/1/16 |
Source URLs
URL Provider
Attributes
Details | Type | #Events | CTI | Value |
---|---|---|---|---|
Details | CVE | 1 | cve-2021-3825 |
|
Details | Domain | 1 | tr.org |
|
Details | Domain | 5 | requestmethod.post |
|
Details | Domain | 1 | this.configurationservice.save |
|
Details | Domain | 1 | this.logger.info |
|
Details | Domain | 1 | im.liderahenk.org |
|
Details | Domain | 4128 | github.com |
|
Details | File | 1 | controllers.config |
|
Details | File | 3 | this.config |
|
Details | File | 30 | this.log |
|
Details | File | 4 | ger.inf |
|
Details | Github username | 1 | mdisec |
|
Details | IPv4 | 1 | 192.168.179.134 |
|
Details | IPv4 | 1441 | 127.0.0.1 |
|
Details | Url | 1 | http://192.168.179.134:8080/lider/config/configurations |
|
Details | Url | 1 | https://github.com/mdisec/pardus-liderahenk-0day-rce |