T1190 Exploit Public-Facing Application
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network. The weakness in the system can be a software bug, a temporary glitch, or a misconfiguration. Exploited applications are often websites/web servers, but can also include databases (like SQL), standard services (like SMB or SSH), network device administration and management protocols…
Quién la usa · con noticias en Jábega
Reglas Sigma para cazarla
- Arcadyan Router Exploitationscriticaltest · webserver
- CVE-2010-5278 Exploitation Attemptcriticaltest · webserver
- CVE-2020-0688 Exchange Exploitation via Web Logcriticaltest · webserver
- CVE-2020-10148 SolarWinds Orion API Auth Bypasscriticaltest · webserver
- CVE-2020-5902 F5 BIG-IP Exploitation Attemptcriticaltest · webserver
- CVE-2021-33766 Exchange ProxyToken Exploitationcriticaltest · webserver
- CVE-2021-40539 Zoho ManageEngine ADSelfService Plus Exploitcriticaltest · webserver
- Citrix ADS Exploitation CVE-2020-8193 CVE-2020-8195criticaltest · webserver
- Citrix Netscaler Attack CVE-2019-19781criticaltest · webserver
- Confluence Exploitation CVE-2019-3398criticaltest · webserver
- DNS RCE CVE-2020-1350criticaltest · windows
- Exchange Exploitation CVE-2021-28480criticaltest · webserver
- Fortinet CVE-2018-13379 Exploitationcriticaltest · webserver
- Fortinet CVE-2021-22123 Exploitationcriticaltest · webserver
- Grafana Path Traversal Exploitation CVE-2021-43798criticaltest · webserver
- OWASSRF Exploitation Attempt Using Public POC - Proxycriticaltest · proxy
- OWASSRF Exploitation Attempt Using Public POC - Webservercriticaltest · webserver
- Oracle WebLogic Exploitcriticaltest · webserver
- Oracle WebLogic Exploit CVE-2021-2109criticaltest · webserver
- ProxyLogon Reset Virtual Directories Based On IIS Logcriticaltest · webserver
- Pulse Secure Attack CVE-2019-11510criticaltest · webserver
- Potential SharePoint ToolShell CVE-2025-53770 Exploitation - File Createcriticalexperimental · windows
- OMIGOD HTTP No Authentication RCE - CVE-2021-38647highstable · zeek
- Pulse Connect Secure RCE Attack CVE-2021-22893highstable · webserver
- ADSelfService Exploitationhightest · webserver
Mostrando 25 de 40.
Reglas de SigmaHQ · Detection Rule License 1.1. Técnica de MITRE ATT&CK®.