Serverless Red Team Infrastructure: Part 1, Web Bugs - MDSec
Tags
maec-delivery-vectors: Watering Hole
attack-pattern: Data Cloud Services - T1021.007 Credentials - T1589.001 Domains - T1583.001 Domains - T1584.001 Javascript - T1059.007 Phishing - T1660 Phishing - T1566 Python - T1059.006 Server - T1583.004 Server - T1584.004 Serverless - T1583.007 Serverless - T1584.007 Software - T1592.002 Connection Proxy - T1090
Show in Graph
Common Information
Type Value
UUID dbab2715-bfa7-4aae-b214-c72f1d3f16bc
Fingerprint 13bb21b656ee2c0
Analysis status DONE
Considered CTI value -2
Text language
Published Sept. 10, 2018, 8:58 a.m.
Added to db Jan. 18, 2023, 11:28 p.m.
Last updated Nov. 17, 2024, 4:48 p.m.
Headline Serverless Red Team Infrastructure: Part 1, Web Bugs
Title Serverless Red Team Infrastructure: Part 1, Web Bugs - MDSec
Detected Hints/Tags/Attributes 43/2/9
Source URLs
Redirection Url
Details Source https://www.mdsec.co.uk/2018/09/serverless-red-team-infrastructure-part-1-web-bugs/
URL Provider
Details Provider Source level domain
Details mdsec.co.uk www.mdsec.co.uk
Attributes
Details Type #Events CTI Value
Details Domain 77 
amazonaws.com
Details Domain 3 
handler.py
Details Domain 1 
handler.ping
Details Domain 1 
x6025fpeq1.execute-api.eu-west-1.amazonaws.com
Details File 3 
handler.py
Details File 1 
rds_config.py
Details File 1 
x6025fpeq1.exe
Details Url 1 
https://x6025fpeq1.execute-api.eu-west-1.amazonaws.com/webbug/collect/ping?token=abcd&step=1
Details Url 1 
https://x6025fpeq1.execute-api.eu-west-1.amazonaws.com/webbug/collect/enum?token=abcd