{"vulnerability": "cve-2017-0144", "sightings": [{"uuid": "6c1c5a74-f7af-4037-96c7-daedc99b6e41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/39f3133c-25fe-4ac9-b1d6-0193f14f0e45", "content": "", "creation_timestamp": "2020-10-13T15:51:01.000000Z"}, {"uuid": "292645e2-b9ff-4b44-a9ee-8be79b814180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/59527baf-7ad8-458f-a1c6-1e14ac12042b", "content": "", "creation_timestamp": "2017-06-28T07:59:06.000000Z"}, {"uuid": "9ec18fcf-e1b9-495e-a3ae-8ccf0b7b14f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/591948ff-adb0-4b15-836a-72dfbce2ab96", "content": "", "creation_timestamp": "2017-05-15T08:36:10.000000Z"}, {"uuid": "5cddbfda-2c86-4c15-95b7-43256c7343ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/5918c2e3-d1ec-494b-89e3-2eeac25ed029", "content": "", "creation_timestamp": "2017-05-14T20:51:52.000000Z"}, {"uuid": "fb244ef4-52d2-44a2-8f1c-f2ebc9730411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/595342ed-8b38-4607-bb19-3a67bce2ab96", "content": "", "creation_timestamp": "2017-06-28T05:50:21.000000Z"}, {"uuid": "c5771dd0-9d4b-4167-acf5-2cf227716cd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/5a7238f2-7ea4-499a-89f6-450b02de0b81", "content": "", "creation_timestamp": "2018-02-01T12:41:02.000000Z"}, {"uuid": "df21b5af-2d9b-4194-8a5d-34a85aa88467", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/5cf0f134-f504-42dd-b11e-9071950d210f", "content": "", "creation_timestamp": "2019-05-31T11:30:42.000000Z"}, {"uuid": "6275e33b-2354-4ff8-a832-8c3818803256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/5eec7614-96f4-4aa1-a248-1f48ac13a7a7", "content": "", "creation_timestamp": "2020-06-19T09:10:37.000000Z"}, {"uuid": "4ec58c89-5d8d-482e-aa1a-51eda6bae67d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "034b6220-ab4b-4f74-b0e9-ec23e77f4fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:18.000000Z"}, {"uuid": "e1497d13-d15a-4793-b91c-ea9bcdad5752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/b60ecd6e-648d-4bc4-a6ad-3527a2216be1", "content": "", "creation_timestamp": "2020-10-09T13:26:51.000000Z"}, {"uuid": "972179a2-c1d7-418b-a150-a5da32b771f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/574d166f-10d7-4fe4-b4ad-44db63e2d6a7", "content": "", "creation_timestamp": "2020-10-09T14:46:32.000000Z"}, {"uuid": "72a9c6d7-15be-4c50-ad61-79033a9d4d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/bef4e3e4-5a14-48c3-a298-4e689b8a77e3", "content": "", "creation_timestamp": "2020-10-09T13:37:39.000000Z"}, {"uuid": "0b05dd1a-7b5c-46e4-a88e-39f6006095e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/b909d469-014d-4c2b-a989-4618f5a3a92b", "content": "", "creation_timestamp": "2020-10-16T03:00:22.000000Z"}, {"uuid": "00b3514b-5770-4b7a-9dcd-2f49ddd9b1e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/8eaa87aa-de4f-40d7-ad6f-a9c433935266", "content": "", "creation_timestamp": "2020-10-09T16:29:08.000000Z"}, {"uuid": "696d3a70-19a6-4216-bf74-e281d9627c4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/5e9bc178-87c4-4e6a-9108-45fd79f742e8", "content": "", "creation_timestamp": "2020-10-13T15:51:03.000000Z"}, {"uuid": "bbdffe69-f006-48a8-bcf2-e9dd2e0f3f3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/e6fe42d5-2d65-4430-a1f1-dc057b94d89e", "content": "", "creation_timestamp": "2020-10-09T13:23:54.000000Z"}, {"uuid": "fbb04637-3315-4e48-b847-b65c1f6faf06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/bfaa9566-52ff-4e95-b138-6ddda6c10234", "content": "", "creation_timestamp": "2020-10-09T13:50:44.000000Z"}, {"uuid": "83f300c0-a482-4f7e-bcdd-d1db7c69eadd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/a5e667a9-3397-4a78-9b18-ff54e18a13e6", "content": "", "creation_timestamp": "2020-10-09T16:03:42.000000Z"}, {"uuid": "eb6eccb8-04d6-4986-a127-f883699ab0ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/41678e4e-bef1-49b8-a948-daaadf197e77", "content": "", "creation_timestamp": "2020-10-09T16:28:50.000000Z"}, {"uuid": "425d1703-e84a-417b-bd6f-ecd20b142aa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/44f90184-cb6a-4e48-9048-dcead658e353", "content": "", "creation_timestamp": "2020-10-09T16:06:09.000000Z"}, {"uuid": "e0e56d28-1cd0-4622-a15c-a5150603cec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/292c8ff0-f4d9-40b6-ac72-e44392d6cc31", "content": "", "creation_timestamp": "2020-10-09T16:31:53.000000Z"}, {"uuid": "cc3aa2e5-ae6c-46f9-8a51-d81df2e47692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/884ceafb-af27-42e9-8d79-e9b6ce930532", "content": "", "creation_timestamp": "2020-10-09T15:10:37.000000Z"}, {"uuid": "0fd2c81b-0c0c-4fec-894d-b97efdb7af7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/95706ca1-e4d5-4714-b130-7c78ea222049", "content": "", "creation_timestamp": "2020-11-12T03:00:10.000000Z"}, {"uuid": "a506c685-d513-4be8-9f9b-e0bb11a30ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/eea16ce4-91e8-4e88-af2f-9972a3e3c086", "content": "", "creation_timestamp": "2020-10-09T16:57:42.000000Z"}, {"uuid": "e7d547d5-40c2-46a1-9baf-0db56960f826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/e1d58ad8-7800-491b-a63b-a03d081914d4", "content": "", "creation_timestamp": "2020-06-25T12:24:13.000000Z"}, {"uuid": "28a9ee90-8070-41d0-acf2-a38355c2de45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/8a5d9ef7-0fae-4fcc-a606-d3701ec5f0e0", "content": "", "creation_timestamp": "2024-10-15T11:39:10.000000Z"}, {"uuid": "e4a4195a-2ada-4baf-8e2e-19646b13950a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://www.exploit-db.com/exploits/47456", "content": "", "creation_timestamp": "2019-10-02T00:00:00.000000Z"}, {"uuid": "a62ec4e8-52d3-41a1-b7e5-946a588abe0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://www.exploit-db.com/exploits/42315", "content": "", "creation_timestamp": "2017-07-11T00:00:00.000000Z"}, {"uuid": "9d4558a4-8388-48d4-b8d7-698b53ae19d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://www.exploit-db.com/exploits/42030", "content": "", "creation_timestamp": "2017-05-17T00:00:00.000000Z"}, {"uuid": "56d5a284-58dd-4b19-82bf-661ae738011f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://www.exploit-db.com/exploits/41891", "content": "", "creation_timestamp": "2017-04-17T00:00:00.000000Z"}, {"uuid": "3f317bf4-35f0-4057-af9b-e7aea9a455ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://www.exploit-db.com/exploits/42031", "content": "", "creation_timestamp": "2017-05-17T00:00:00.000000Z"}, {"uuid": "3cfec306-f4c8-458b-b45c-89a9d8997f30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971242", "content": "", "creation_timestamp": "2024-12-24T20:26:23.858741Z"}, {"uuid": "690c6acf-07f2-4d43-a3a2-e6fef6d9d9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "b731a740-915d-49cb-a839-564f7624296a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:50.000000Z"}, {"uuid": "db5a5d79-36ca-40a8-bdad-f59a2c57225a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:38.000000Z"}, {"uuid": "65fcd751-1d1a-4b3c-ba48-9a8e375359a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/5eec7614-96f4-4aa1-a248-1f48ac13a7a7", "content": "", "creation_timestamp": "2025-04-14T06:40:29.000000Z"}, {"uuid": "c7a73572-4aa0-4951-a06d-527e7758c967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2017-0144", "type": "seen", "source": "https://gist.github.com/jcohen66/105f8e0c3266d7222a77a753ab1876d0", "content": "", "creation_timestamp": "2025-04-16T13:17:51.000000Z"}, {"uuid": "1d1a810f-fb4a-457e-ba79-6566ee0b078f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://gist.github.com/Mickael5466/a81c256220e1573571bf040c96115212", "content": "", "creation_timestamp": "2025-06-21T19:15:54.000000Z"}, {"uuid": "f2b2e55a-37ac-4313-9238-72267e8035e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://gist.github.com/prabhatverma47/2830b7c499dfe61ab92fb646c87271c1", "content": "", "creation_timestamp": "2025-05-12T05:09:31.000000Z"}, {"uuid": "5d5ebe23-8a0e-4225-801b-8604abbe8736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://gist.github.com/prabhatverma47/061f0bdee8625b9eb680be746e3d9139", "content": "", "creation_timestamp": "2025-05-12T05:10:08.000000Z"}, {"uuid": "5bec3e85-740d-4bf2-8e50-54a1d4cccc1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/smb_doublepulsar_rce.rb", "content": "", "creation_timestamp": "2020-02-03T20:07:28.000000Z"}, {"uuid": "2932dc54-6815-449d-803d-aa4854703e7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms17_010_eternalblue.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "bad6ef37-3b2f-4369-afad-8926d3b35508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-cb641839-91aaef4e4120943c", "content": "", "creation_timestamp": "2025-08-18T09:44:29.574087Z"}, {"uuid": "b4a5ed83-362c-4a6e-bfd4-5a201ca7a106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://gist.github.com/Aggerio/10aad290a474eb5bc314c9ace3da24e8", "content": "", "creation_timestamp": "2025-11-23T14:43:53.000000Z"}, {"uuid": "82ed33f3-0226-410a-92e6-a9fde4d02e4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://gist.github.com/nunesfb/3ae04f694040b1e2c4712833771dd653", "content": "", "creation_timestamp": "2025-09-11T18:20:38.000000Z"}, {"uuid": "8c733a5c-4119-41cc-b7ee-f3e4685f8525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lx7j6cnicc2e", "content": "", "creation_timestamp": "2025-08-25T07:48:42.255785Z"}, {"uuid": "8e015fec-965e-4b56-8609-85faeef5ed7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/smb/smb_ms17_010.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "77a9cd16-76ac-4135-af38-07e6f19a8542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://sploitus.com/exploit?id=B9115235-91E9-55D9-A098-7394565D09AD", "content": "", "creation_timestamp": "2025-10-18T09:49:55.000000Z"}, {"uuid": "d01e3c81-c541-4d94-9e42-c6ce0fb6f62c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:03.000000Z"}, {"uuid": "a4d008d4-f48f-4d01-9444-b593389a7301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/8a5d9ef7-0fae-4fcc-a606-d3701ec5f0e0", "content": "", "creation_timestamp": "2026-01-09T20:17:31.000000Z"}, {"uuid": "380271eb-1fba-4033-b85b-9732212e9394", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d41ef7ed-39b6-4408-a718-2c3bce5fc99e", "content": "", "creation_timestamp": "2025-03-03T08:51:11.190614Z"}, {"uuid": "b5ed8127-bfd9-4dfb-ad34-f1e420028a01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/27723d1b-b435-4e44-909f-004191f29310", "content": "", "creation_timestamp": "2026-02-02T12:25:28.243370Z"}, {"uuid": "90d45dd9-8618-4aab-a80b-6cfc68cb12ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/856556ac-1285-4df5-9535-fda3efe49c1b", "content": "", "creation_timestamp": "2026-02-02T12:28:24.852962Z"}, {"uuid": "22438a65-7a88-41e8-b9c6-fad5500553a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://t.me/tech_cyber_ai_israel/31", "content": "\u05d1\u05d4\u05de\u05e9\u05da \u05ea\u05d5\u05e6\u05d0\u05d5\u05ea \u05d4\u05e1\u05e7\u05e8 \u261d\ud83c\udffc\n\n\u05d1\u05e1\u05e8\u05d8\u05d5\u05e0\u05d9\u05dd \u05d4\u05e7\u05d5\u05d3\u05de\u05d9\u05dd \u05d4\u05d3\u05d2\u05de\u05e0\u05d5 \u05ea\u05d5\u05db\u05e0\u05ea \u05db\u05d5\u05e4\u05e8 \u05de\u05e1\u05d5\u05d2 WannaCry\n\u05d1\u05e1\u05e8\u05d8\u05d5\u05df \u05d4\u05d1\u05d0 \u05e0\u05dc\u05de\u05d3 \u05db\u05d9\u05e6\u05d3 \u05d4\u05d0\u05e7\u05e8\u05d9\u05dd \u05e2\u05d5\u05e9\u05d9\u05dd \u05e9\u05d9\u05de\u05d5\u05e9 \u05d1 Exploit \u05de\u05e1\u05d5\u05d2:\nEternalBlue (CVE-2017-0144) [MS17-010]\n\u05db\u05d9\u05d3\u05d5\u05e2, \u05ea\u05d5\u05db\u05e0\u05ea \u05d4\u05db\u05d5\u05e4\u05e8 WannaCry , \u05d4\u05e6\u05dc\u05d9\u05d7\u05d4 \u05dc\u05e9\u05db\u05e4\u05dc \u05d0\u05ea \u05e2\u05e6\u05de\u05d4 \u05dc\u05d4\u05e8\u05d1\u05d4 \u05de\u05d0\u05d5\u05d3 \u05de\u05d7\u05e9\u05d1\u05d9\u05dd \u05d1\u05e2\u05d6\u05e8\u05ea EternalBlue \u05d1\u05e9\u05e0\u05ea 2017\n\n\u05e2\u05dc \u05de\u05e0\u05ea \u05dc\u05d4\u05d9\u05d5\u05ea \u05de\u05d5\u05d2\u05e0\u05d9\u05dd \u05d1\u05e4\u05e0\u05d9 \u05d4\u05de\u05ea\u05e7\u05e4\u05d4 \u05d4\u05d6\u05d5, \u05e0\u05d9\u05ea\u05df:\n1. \u05dc\u05e9\u05d3\u05e8\u05d2 \u05d0\u05ea \u05d4\u05de\u05d7\u05e9\u05d1 \u05dc\u05d2\u05e8\u05e1\u05d0 \u05d4\u05e2\u05d3\u05db\u05e0\u05d9\u05ea \u05d4\u05de\u05d5\u05de\u05dc\u05e6\u05ea \u05e2\u05dc \u05d9\u05d3\u05d9 Microsoft\n2. \u05e0\u05d9\u05ea\u05df \u05dc\u05d4\u05d8\u05de\u05d9\u05e2 \u05d4\u05d2\u05e0\u05ea IPS \u05e8\u05dc\u05d5\u05d5\u05e0\u05d8\u05d9\u05ea \u05d1 FireWall \u05d4\u05d0\u05e8\u05d2\u05d5\u05e0\u05d9.\n\n\n\n\u05db\u05dc\u05dc \u05d1\u05e8\u05d6\u05dc:\n*\u05d4\u05e1\u05e8\u05d8\u05d5\u05e0\u05d9\u05dd \u05e9\u05d0\u05e0\u05d9 \u05de\u05e9\u05ea\u05e3 \u05d4\u05dd \u05dc\u05de\u05d8\u05e8\u05d5\u05ea \u05dc\u05de\u05d9\u05d3\u05d4 \u05d1\u05dc\u05d1\u05d3. \u05d0\u05d9\u05df \u05dc\u05e2\u05e9\u05d5\u05ea \u05db\u05dc \u05e9\u05d9\u05de\u05d5\u05e9 \u05d1\u05d9\u05d3\u05e2 \u05d4\u05e0\u05e8\u05db\u05e9 \u05dc\u05e8\u05e2\u05d4 \u05d5/\u05d0\u05d5 \u05dc\u05e4\u05e2\u05d9\u05dc\u05d5\u05ea \u05dc\u05d0 \u05d7\u05d5\u05e7\u05d9\u05ea \u05d5\u05d0\u05e0\u05d9 \u05db\u05de\u05d5\u05d1\u05df \u05dc\u05d0 \u05de\u05e2\u05d5\u05d3\u05d3 \u05e4\u05e2\u05d9\u05dc\u05d5\u05ea \u05db\u05d6\u05d5*\n\n#EternalBlue\n#CVE_2017_0144\n#MS17_010\n#Exploit\n\n\u05d0\u05d4\u05d1\u05ea\u05dd? \u05e9\u05d9\u05de\u05d5 \u05dc\u05d9\u05d9\u05e7.\n\u05de\u05d5\u05d6\u05de\u05e0\u05d9\u05dd \u05dc\u05e9\u05ea\u05e3 \u05e2\u05dd \u05d7\u05d1\u05e8\u05d9\u05dd \u05d5\u05de\u05e9\u05e4\u05d7\u05d4.\n\n\u05dc\u05d9\u05e0\u05e7 \u05dc\u05e2\u05e8\u05d5\u05e5:\nhttps://t.me/tech_cyber_ai_israel", "creation_timestamp": "2024-07-27T22:31:20.000000Z"}, {"uuid": "04150028-7ad1-495c-a26d-6e080af62e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "published-proof-of-concept", "source": "Telegram/pGBSz86okgshWlq1qb7UejnRgKlk7reC0fUjwlHdKavwlxg", "content": "", "creation_timestamp": "2025-12-17T03:00:07.000000Z"}, {"uuid": "e4bbc2e9-dc0e-41f5-9263-dc25d53dcb37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "published-proof-of-concept", "source": "Telegram/or1-u7bo3hSkGx90FYNn1JWuirrC5XL-Ob12F2D6DSkjTA4", "content": "", "creation_timestamp": "2025-08-27T19:00:08.000000Z"}, {"uuid": "78b88560-d2cf-42c4-b6eb-aa522b4428ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://t.me/MajorHacker/36", "content": "Eternal scanner is an network scanner for Eternal Blue exploit CVE-2017-0144 & Eternal Romance (named pipe) CVE-2017-0145\n\n# Requirements\n- masscan\n- metasploit-framework\n- wget (To Update Eternal Scanner Directly from github)\n- pip (for alternative install of python modules)\n- python-crypto (Dependency for Eternal Romance check)\n- python-impacket (Dependency for Eternal Romance check)\n- python-pyasn1-modules (Dependency for Eternal Romance check)\n\n# How to Install\n- git clone https://github.com/peterpt/eternal_scanner.git\n- cd eternal_scanner && ./escan\n- OR ./escan -h (to change scanner speed)\n\n# Install Requirements\n- apt-get install masscan metasploit-framework wget python-pip python-crypto python-impacket python-pyasn1-modules", "creation_timestamp": "2019-03-29T05:58:16.000000Z"}, {"uuid": "b2ced0b4-4767-4408-ad94-f6441997f58d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "Telegram/JkMWvvStSPZXvgS3ccEVhNcf8Zlanwq9ZPo7UTxxPl4CKpc", "content": "", "creation_timestamp": "2025-10-18T15:00:13.000000Z"}, {"uuid": "ed5042b2-e3f1-487d-b4be-0411b1075d85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "published-proof-of-concept", "source": "Telegram/vk3FldMzdx_13t7ttv05ttLKGzStNIAl9gbsU1WEL8nWdI0", "content": "", "creation_timestamp": "2026-04-06T15:00:15.000000Z"}, {"uuid": "abea3e51-5ecd-41f5-bfd8-5d68e6698ce3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "published-proof-of-concept", "source": "Telegram/H97MW8DcOQ0HQ2edqbF4Ukf6930T9O-KaahGicp1PWMI3n4", "content": "", "creation_timestamp": "2025-11-05T15:00:12.000000Z"}, {"uuid": "7b22cbeb-2a38-45d0-a742-2951254ab7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://t.me/codeby_sec/1015", "content": "Eternal Scanner - \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0441\u043a\u0430\u043d\u0435\u0440 \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 CVE-2017-0144", "creation_timestamp": "2017-12-04T17:52:31.000000Z"}, {"uuid": "592bb6fa-b87b-431b-9715-16fc0b8f6fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://t.me/codeby_sec/1598", "content": "#pentest \nCVE-2017-0144 |MS17-010\n\n \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u0432\u0430\u043c \u043f\u043e\u043a\u0430\u0436\u0443 \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c CVE-2017-0144.", "creation_timestamp": "2018-06-22T14:29:35.000000Z"}, {"uuid": "70631a66-f133-4e28-a7a3-08e8018142ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "published-proof-of-concept", "source": "Telegram/nJH2cUntsP-1GdR93bWT2b7OoqkB5z2mjKSjHmLO9DqvvQI", "content": "", "creation_timestamp": "2025-09-08T23:00:11.000000Z"}, {"uuid": "7e66c7a0-c53e-4f03-8b31-3410e3a2032c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "published-proof-of-concept", "source": "Telegram/pmzKbihchBYeJvBnkfYLk5LESIxSAVi0zGHv3QahmixU_js", "content": "", "creation_timestamp": "2026-04-20T09:00:05.000000Z"}, {"uuid": "8b6b45cf-6e59-4497-a08a-275587dd4da7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "Telegram/aTr5tBNg69tPKoAJQ0u9NDD5epq7TlR2MA_HoHKMBe9U5Dk", "content": "", "creation_timestamp": "2026-04-20T07:00:10.000000Z"}, {"uuid": "1e9bebf6-baf7-4b15-810f-369c7aa4f861", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "published-proof-of-concept", "source": "Telegram/PudfnkTOKtwvxn3m6SDUn-oISw10fGc3mPOBb2KX_OxnsrM", "content": "", "creation_timestamp": "2026-04-23T23:00:14.000000Z"}, {"uuid": "a51b3ae1-abfa-4a23-aced-c803d957e0b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "published-proof-of-concept", "source": "Telegram/4qDKgTopDS_hPUJyDar22mQk9nYp4NOVSipFWZ2vptLsiDY", "content": "", "creation_timestamp": "2026-04-24T03:00:05.000000Z"}, {"uuid": "db208c5f-bb98-40fc-a4d0-398efc70f5f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "Telegram/exKF4hznHXC2rCogKOVE6-N_qfk7bi5PiyZHB8MGD8Dm6No", "content": "", "creation_timestamp": "2026-04-22T15:00:15.000000Z"}, {"uuid": "f9336fa4-b5db-4d67-abc5-29d35e32645e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "published-proof-of-concept", "source": "Telegram/UcOXFA8nSOttq6tnEv5GYCOJTlyoQN894TbAmd-Usu-nlPU", "content": "", "creation_timestamp": "2026-04-22T15:00:07.000000Z"}, {"uuid": "0efbdb22-e093-42f9-8d86-86693c729c75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "published-proof-of-concept", "source": "Telegram/vKt1e4azT5T7C0rLcqmSzR1-eYk4psQyeIQOy05R--Qw2SA", "content": "", "creation_timestamp": "2026-04-22T21:00:04.000000Z"}, {"uuid": "f1f22eb9-8e84-4c85-9ce5-b6e74a7208ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "published-proof-of-concept", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/1258", "content": "What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent\u3002red team tools Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. In principle, do not repeat the wheel, unless there are bugs, problemsCross-platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc.Support [21] password blasting, support custom dictionary, open by \"priorityNmap\": true RDPSSHrsh-spxMysqlMsSqlOraclePostgresqlRedisFTPMongodbSMB, also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), SmbGhost (CVE- 2020-0796)TelnetSnmpWap-wsp (Elasticsearch)RouterOsHTTP BasicAuthWeblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detectionTomcatJbossWinrm(wsman)POP3By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual interventionDetect whether there is nmap in the system, and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan Disadvantages of using nmap: Is the network bad, because the traffic network packet is too large, which may lead to incomplete results Using nmap additionally requires setting the root password to an environment variable\n  export PPSSWWDD=yourRootPswd More references: config/doNmapScan.sh By default, naabu is used to complete port scanning (https://www.kitploit.com/search/label/Port%20Scanning) -stats=true to view the scanning progress Can I not scan ports?noScan=true ./scan4all -l list.txt -v\n# nmap result default noScan=true \n./scan4all -l nmapRssuilt.xml -vFast 15000+ POC detection capabilities, PoCs include: nuclei POCNuclei Templates Top 10 statisticsTAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNTcve1294daffainfo605cves1277info1352http3554panel591dhiyaneshdk503exposed-panels600high938file76lfi486pikpikcu321vulnerabilities493medium766network50xss439pdteam269technologies266critical436dns17wordpress401geeknik187exposures254low211exposure355dwisiswant0169misconfiguration207unknown7cve20213220x_akoko154token-spray206rce313princechaddha147workflows187wp-plugin297pussycat0x128default-logins101tech282gy741126file76281 directories, 3922 files.vscan POC vscan POC includes: xray 2.0 300+ POC, go POC, etc.scan4all POCSupport 7000+ web fingerprint scanning, identification:httpx fingerprint vscan fingerprintvscan fingerprint: including eHoleFinger, localFinger, etc.scan4all fingerprintSupport 146 protocols and 90000+ rule port scanningDepends on protocols and fingerprints supported by nmapFast HTTP sensitive file detection, can customize dictionaryLanding page detectionSupports multiple types of input - STDIN/HOST/IP/CIDR/URL/TXTSupports multiple output types - JSON/TXT/CSV/STDOUTHighly integratable: Configurable unified storage of results to Elasticsearch (https://www.kitploit.com/search/label/Elasticsearch) [strongly recommended]Smart SSL Analysis:In-depth analysis, automatically correlate the scanning of domain names in SSL information, such as *.xxx.com, and complete subdomain traversal according to the configuration, and the result will automatically add the target to the scanning listSupport to enable *.xx.com subdomain traversal function in smart SSL information, export EnableSubfinder=true, or adjust in the configuration fileAutomatically identify the case of multiple IPs associated with a domain (DNS), and automatically scan the associated multiple IPsSmart processing:When the IPs of multiple domain names in the list are the same, merge port scans to improve efficiencyIntelligently handle http abnormal pages, and fingerprint calculation and learningAutomated supply chain (https://www.kitploit.com/search/label/Supply%20Chain) identification, analysis", "creation_timestamp": "2022-09-28T12:10:14.000000Z"}, {"uuid": "42691ed9-6e8d-457b-ace1-31dd32788460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://t.me/true_secator/7340", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0432 \u043d\u043e\u0432\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u043b\u0438 \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u044e \u0431\u044d\u043a\u0434\u043e\u0440\u0430 PipeMagic: \u043e\u0442 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0441 RansomExx \u0434\u043e CVE-2025-29824, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0432 \u0447\u0438\u0441\u043b\u0435 121, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 Microsoft  PatchTuesday.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u043e\u0442\u0447\u0435\u0442 \u0441\u0442\u0430\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u041b\u041a \u0441 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 BI.ZONE. \n\n\u041a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 TTPs \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u0432 PipeMagic \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u044b, \u0430 \u0411\u0438\u0437\u043e\u043d\u044b, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u043f\u0440\u043e\u0432\u0435\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0441\u0430\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-29824.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0432 \u0420\u0435\u0434\u043c\u043e\u043d\u0434\u0435, CVE-2025-29824 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432\u044b\u0445\u043e\u0434\u0430 \u043f\u0430\u0442\u0447\u0430, \u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043a \u043d\u0435\u0439 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u041f\u041e\u00a0PipeMagic, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u041b\u041a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430 \u0432 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c RansomExx.\n\n\u0416\u0435\u0440\u0442\u0432\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441\u0442\u0430\u043b\u0438 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432 \u042e\u0433\u043e-\u0412\u043e\u0441\u0442\u043e\u0447\u043d\u043e\u0439 \u0410\u0437\u0438\u0438. \u0414\u043b\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2017-0144.\n\n\u0417\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b \u0441\u043e\u0431\u043e\u0439 \u0442\u0440\u043e\u044f\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 Rufus \u0434\u043b\u044f \u0444\u043e\u0440\u043c\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f USB-\u0434\u0438\u0441\u043a\u043e\u0432, \u0430 \u0441\u0430\u043c PipeMagic \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u043b \u0434\u0432\u0430 \u0440\u0435\u0436\u0438\u043c\u0430 \u0440\u0430\u0431\u043e\u0442\u044b: \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 \u0431\u044d\u043a\u0434\u043e\u0440 \u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0448\u043b\u044e\u0437 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u043a\u043e\u043c\u0430\u043d\u0434.\n\n\u041f\u043e\u0437\u0436\u0435 \u0432 \u041b\u041a \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0438 \u0435\u0433\u043e \u0432\u043d\u043e\u0432\u044c \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0438. \u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u044d\u0442\u043e \u0431\u044b\u043b\u0430 \u0442\u0430 \u0436\u0435 \u0432\u0435\u0440\u0441\u0438\u044f PipeMagic, \u0447\u0442\u043e \u0438 \u0432 2022 \u0433\u043e\u0434\u0443.\n\n\u0422\u043e\u0433\u0434\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0438 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435-\u043a\u043b\u0438\u0435\u043d\u0442 \u0434\u043b\u044f ChatGPT.\n\n\u041e\u043d\u043e \u0431\u044b\u043b\u043e \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043e \u043d\u0430 Rust \u0438\u00a0 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0438 Tauri \u0434\u043b\u044f \u043e\u0442\u0440\u0438\u0441\u043e\u0432\u043a\u0438 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 Tokio \u0434\u043b\u044f \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u0447.\n\n\u041d\u0438\u043a\u0430\u043a\u043e\u0439 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432 \u043d\u0435\u043c \u043d\u0435 \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c. \u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u043b\u043e \u0438\u0437 \u0441\u0432\u043e\u0435\u0433\u043e \u043a\u043e\u0434\u0430 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 AES \u043c\u0430\u0441\u0441\u0438\u0432 \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c 105 615 \u0431\u0430\u0439\u0442, \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u043b\u043e \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u043b\u043e \u0435\u0433\u043e. \u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442 - \u0448\u0435\u043b\u043b-\u043a\u043e\u0434, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430.\u00a0\n\n\u041e\u0434\u043d\u043e\u0439 \u0438\u0437 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 PipeMagic \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u044f \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e\u0433\u043e \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u0434\u043b\u0438\u043d\u043e\u0439 16 \u0431\u0430\u0439\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u0430\u043d\u0430\u043b\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0439.\n\n\u0414\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441, \u0430 \u0434\u043b\u044f \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u044f \u043c\u043e\u0434\u0443\u043b\u0435\u0439 (PipeMagic \u043e\u0431\u044b\u0447\u043d\u043e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0441 C2) \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u043c\u0435\u043d:\u00a0hxxp://aaaaabbbbbbb.eastus.cloudapp.azure[.]com.\n\n\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u0430, \u0432 2025 \u0433\u043e\u0434\u0443 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u043b\u0438 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432 \u0411\u0440\u0430\u0437\u0438\u043b\u0438\u0438 \u0438 \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0438.\n\n\u041f\u0440\u0438 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0431\u044b\u043b\u043e \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043a \u0434\u043e\u043c\u0435\u043d\u0443\u00a0hxxp://aaaaabbbbbbb.eastus.cloudapp.azure[.]com, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0438 \u043d\u0430\u0432\u0435\u043b\u043e \u0440\u0435\u0441\u0435\u0447\u0440\u0435\u0440\u043e\u0432 \u043d\u0430 \u043c\u044b\u0441\u043b\u044c \u043e \u0441\u0432\u044f\u0437\u0438 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0441 PipeMagic. \n\n\u041f\u043e\u0437\u0436\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0448\u043b\u0438 \u0438 \u0441\u0430\u043c \u0431\u044d\u043a\u0434\u043e\u0440.\n\n\u0412 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u0432 \u0440\u043e\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u043b \u0444\u0430\u0439\u043b \u0444\u043e\u0440\u043c\u0430\u0442\u0430 Microsoft Help Index File. \n\n\u0411\u044b\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u043e\u0431\u0440\u0430\u0437\u0446\u044b \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 PipeMagic, \u0438\u043c\u0438\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043a\u043b\u0438\u0435\u043d\u0442 ChatGPT, \u043f\u043e\u0445\u043e\u0436\u0438\u0439 \u043d\u0430 \u0442\u043e\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u043b\u0438 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0438 \u0432 2024 \u0433\u043e\u0434\u0443.\n\n\u0423\u0434\u0430\u043b\u043e\u0441\u044c \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0442\u0440\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 2025 \u0433\u043e\u0434\u0430 \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u0443\u044e \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c, \u043d\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0443\u044e \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0431\u044d\u043a\u0434\u043e\u0440\u0435.\n\n\u0412\u0441\u0435 \u043c\u043e\u0434\u0443\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u043e\u0431\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0434\u043b\u044f 32-\u0431\u0438\u0442\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Windows.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445: \u043c\u043e\u0434\u0443\u043b\u044c \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438, \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a (\u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u0438 \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435) \u0438 \u0438\u043d\u0436\u0435\u043a\u0442\u043e\u0440 (\u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u0437\u0430\u043f\u0443\u0441\u043a \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 - \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430, \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0430 C# (.NET).\n\n\u041f\u043e\u0441\u043b\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0432\u044b\u0431\u0440\u0430\u043d\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b \u043f\u0435\u0440\u0435\u0434 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044e \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044e \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439.\n\n\u0412 \u0430\u0442\u0430\u043a\u0430\u0445 2025 \u0433\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u0442\u0438\u043b\u0438\u0442\u0443 ProcDump \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 LSASS - \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0435, \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0439 Microsoft \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438  CVE-2025-29824.\n\n\u0410 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0443\u0436\u0435 \u043a\u043e\u043b\u043b\u0435\u0433\u0438 \u0438\u0437 Bi.ZONE \u0432\u043e\u00a0\u0432\u0442\u043e\u0440\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f.", "creation_timestamp": "2025-08-18T18:00:08.000000Z"}, {"uuid": "f4c98aba-ee01-429a-bf69-27238a10bd1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://t.me/tech_cyber_ai_israel/22", "content": "\u05d1\u05d4\u05de\u05e9\u05da \u05ea\u05d5\u05e6\u05d0\u05d5\u05ea \u05d4\u05e1\u05e7\u05e8 \u261d\ud83c\udffc\n\n\u05d1\u05e1\u05e8\u05d8\u05d5\u05e0\u05d9\u05dd \u05d4\u05e7\u05d5\u05d3\u05de\u05d9\u05dd \u05d4\u05d3\u05d2\u05de\u05e0\u05d5 \u05ea\u05d5\u05db\u05e0\u05ea \u05db\u05d5\u05e4\u05e8 \u05de\u05e1\u05d5\u05d2 WannaCry\n\u05d1\u05e1\u05e8\u05d8\u05d5\u05df \u05d4\u05d1\u05d0 \u05e0\u05dc\u05de\u05d3 \u05db\u05d9\u05e6\u05d3 \u05d4\u05d0\u05e7\u05e8\u05d9\u05dd \u05e2\u05d5\u05e9\u05d9\u05dd \u05e9\u05d9\u05de\u05d5\u05e9 \u05d1 Exploit \u05de\u05e1\u05d5\u05d2:\nEternalBlue (CVE-2017-0144) [MS17-010]\n\u05db\u05d9\u05d3\u05d5\u05e2, \u05ea\u05d5\u05db\u05e0\u05ea \u05d4\u05db\u05d5\u05e4\u05e8 WannaCry , \u05d4\u05e6\u05dc\u05d9\u05d7\u05d4 \u05dc\u05e9\u05db\u05e4\u05dc \u05d0\u05ea \u05e2\u05e6\u05de\u05d4 \u05dc\u05d4\u05e8\u05d1\u05d4 \u05de\u05d0\u05d5\u05d3 \u05de\u05d7\u05e9\u05d1\u05d9\u05dd \u05d1\u05e2\u05d6\u05e8\u05ea EternalBlue \u05d1\u05e9\u05e0\u05ea 2017\n\n\u05e2\u05dc \u05de\u05e0\u05ea \u05dc\u05d4\u05d9\u05d5\u05ea \u05de\u05d5\u05d2\u05e0\u05d9\u05dd \u05d1\u05e4\u05e0\u05d9 \u05d4\u05de\u05ea\u05e7\u05e4\u05d4 \u05d4\u05d6\u05d5, \u05e0\u05d9\u05ea\u05df:\n1. \u05dc\u05e9\u05d3\u05e8\u05d2 \u05d0\u05ea \u05d4\u05de\u05d7\u05e9\u05d1 \u05dc\u05d2\u05e8\u05e1\u05d0 \u05d4\u05e2\u05d3\u05db\u05e0\u05d9\u05ea \u05d4\u05de\u05d5\u05de\u05dc\u05e6\u05ea \u05e2\u05dc \u05d9\u05d3\u05d9 Microsoft\n2. \u05e0\u05d9\u05ea\u05df \u05dc\u05d4\u05d8\u05de\u05d9\u05e2 \u05d4\u05d2\u05e0\u05ea IPS \u05e8\u05dc\u05d5\u05d5\u05e0\u05d8\u05d9\u05ea \u05d1 FireWall \u05d4\u05d0\u05e8\u05d2\u05d5\u05e0\u05d9.\n\n\n\n\u05db\u05dc\u05dc \u05d1\u05e8\u05d6\u05dc:\n*\u05d4\u05e1\u05e8\u05d8\u05d5\u05e0\u05d9\u05dd \u05e9\u05d0\u05e0\u05d9 \u05de\u05e9\u05ea\u05e3 \u05d4\u05dd \u05dc\u05de\u05d8\u05e8\u05d5\u05ea \u05dc\u05de\u05d9\u05d3\u05d4 \u05d1\u05dc\u05d1\u05d3. \u05d0\u05d9\u05df \u05dc\u05e2\u05e9\u05d5\u05ea \u05db\u05dc \u05e9\u05d9\u05de\u05d5\u05e9 \u05d1\u05d9\u05d3\u05e2 \u05d4\u05e0\u05e8\u05db\u05e9 \u05dc\u05e8\u05e2\u05d4 \u05d5/\u05d0\u05d5 \u05dc\u05e4\u05e2\u05d9\u05dc\u05d5\u05ea \u05dc\u05d0 \u05d7\u05d5\u05e7\u05d9\u05ea \u05d5\u05d0\u05e0\u05d9 \u05db\u05de\u05d5\u05d1\u05df \u05dc\u05d0 \u05de\u05e2\u05d5\u05d3\u05d3 \u05e4\u05e2\u05d9\u05dc\u05d5\u05ea \u05db\u05d6\u05d5*\n\n#EternalBlue\n#CVE_2017_0144\n#MS17_010\n#Exploit\n\n\u05d0\u05d4\u05d1\u05ea\u05dd? \u05e9\u05d9\u05de\u05d5 \u05dc\u05d9\u05d9\u05e7.\n\u05de\u05d5\u05d6\u05de\u05e0\u05d9\u05dd \u05dc\u05e9\u05ea\u05e3 \u05e2\u05dd \u05d7\u05d1\u05e8\u05d9\u05dd \u05d5\u05de\u05e9\u05e4\u05d7\u05d4.\n\n\u05dc\u05d9\u05e0\u05e7 \u05dc\u05e2\u05e8\u05d5\u05e5:\nhttps://t.me/tech_cyber_ai_israel", "creation_timestamp": "2024-07-27T22:31:20.000000Z"}, {"uuid": "41cf5bea-5808-4bc5-938b-f01953187e19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://t.me/poxek/666", "content": "\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u00abEternal scilence\u00bb \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 UPnP \u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0440\u043e\u0443\u0442\u0435\u0440\u044b \u0432 \u043f\u0440\u043e\u043a\u0441\u0438 \u0434\u043b\u044f \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u044f \u0434\u0440\u0443\u0433\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\n\nUPnP (universal plug and play) - \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b, \u043e\u043f\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432; \u043e\u043d \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u0440\u0443\u0433\u0438\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0432 \u0441\u0435\u0442\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u043e\u0431\u0440\u043e\u0441\u0430 \u043f\u043e\u0440\u0442\u043e\u0432, \u0447\u0442\u043e\u0431\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0435\u0432\u0430\u0439\u0441\u0430\u043c \u0432\u043d\u0443\u0442\u0440\u0438 \u0441\u0435\u0442\u0438 \u043f\u043e \u043c\u0435\u0440\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438. \u0422\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f, \u043e\u0434\u043d\u0430\u043a\u043e, \u0434\u0430\u043b\u0435\u043a\u043e \u043d\u0435 \u0441\u0442\u043e\u043b\u044c \u0436\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430, \u0441\u043a\u043e\u043b\u044c \u0443\u0434\u043e\u0431\u043d\u0430: \u0437\u0430 \u0432\u0440\u0435\u043c\u044f \u0435\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0438\u043c\u043f\u043b\u0435\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044f\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0445\u043e\u0434\u0435 \u0434\u0430\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438, \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u043e\u0439 Akamai (\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u043c\u0438 \u0435\u0435) \u00abUPnProxy\u00bb.\n\n\u0415\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u0434\u043e\u043a\u043b\u0430\u0434\u0443, 277,000 \u0438\u0437 3,500,000 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0434\u0430\u043d\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445, \u0438 45,113 \u0443\u0436\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 EternalBlue (CVE-2017-0144) \u0438 EternalRed (CVE-2017-7494) \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f RCE \u043d\u0430 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0445 windows \u0438 Linux \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441\u043e\u043e\u0442\u0432\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e. \u0414\u0430\u043b\u0435\u0435 \u0441\u043e\u0437\u0434\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u043b\u044f \u043f\u0440\u043e\u0431\u0440\u043e\u0441\u0430 \u043f\u043e\u0440\u0442\u043e\u0432 \u0441 \u0437\u0430\u0431\u0430\u0432\u043d\u043e\u0439 \u0444\u0440\u0430\u0437\u043e\u0439 - \u00abgalleta silenciosa\u00bb (\u0442\u0438\u0445\u0430\u044f \u043f\u0435\u0447\u0435\u043d\u044c\u043a\u0430 \u0432 \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0435 \u0441 \u0438\u0441\u043f\u0430\u043d\u0441\u043a\u043e\u0433\u043e).\n\nAkamai \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 bash-\u0441\u043a\u0440\u0438\u043f\u0442, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0447\u0438\u0441\u0442\u0438\u0442\u044c \u0443\u0436\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u0432\u0430\u0439\u0441\u044b.\n@NeKaspersky", "creation_timestamp": "2022-02-01T13:08:16.000000Z"}, {"uuid": "c6e049b9-6486-4c7c-98a8-5dfc7a3ec1d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://t.me/CherepawwkaChannel/240", "content": "\ud83d\udc27\u041f\u043e\u0441\u0442\u0438\u0433\u0430\u0435\u043c \u0430\u0437\u044b Metasploit Framework\ud83d\udc27\nhttps://telegra.ph/Metasploit-Framework-101-12-26\n\n\u042d\u0442\u043e\u0442 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b \u043f\u043e\u0434\u043e\u0439\u0434\u0451\u0442 \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043d\u0438\u043a\u043e\u0433\u0434\u0430 \u043d\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u043b \u0441 MSF \u0438\u043b\u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u0445\u043e\u0447\u0435\u0442 \u043f\u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f \u0441 \u043d\u0438\u043c \u043f\u043e\u043b\u0443\u0447\u0448\u0435: \u0437\u0434\u0435\u0441\u044c \u043c\u044b \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u043c \u043e\u0431 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u0444\u0440\u044d\u0439\u043c\u0432\u043e\u0440\u043a\u0430, \u043f\u043e\u0440\u0430\u0431\u043e\u0442\u0430\u0435\u043c \u0441 \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u043c \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a, \u0430 \u0434\u043b\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u0430 \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043a CVE-2017-0144 (EternalBlue) Windows Server\ud83e\ude9f\n\n\u041d\u043e \u044d\u0442\u043e \u043d\u0435 \u0432\u0441\u0451! \u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u044b \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0437\u0430\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u0432 Windows \u0447\u0435\u0440\u0435\u0437 \u043c\u043e\u0434\u0443\u043b\u044c \u043f\u043e\u0441\u0442\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0434\u0432\u0430 \u0441\u043f\u043e\u0441\u043e\u0431\u0430 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0441\u0442\u043e\u0433\u043e \u0448\u0435\u043b\u043b\u0430 \u0434\u043e \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 Meterpreter, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0434\u0430\u043c\u043f\u0430 SAM \u0438 \u0430\u0442\u0430\u043a\u0438 DCSync \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043c\u043e\u0434\u0443\u043b\u044f Kiwi\ud83e\udd5d\n\n#c2 #\u0437\u0430\u043c\u0435\u0442\u043a\u0438 #\u043e\u0431\u0443\u0447\u0430\u044e\u0449\u0438\u0439", "creation_timestamp": "2024-02-02T13:46:37.000000Z"}, {"uuid": "f1c18e60-105f-41dd-8d4b-f394bbbec558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://t.me/HackingForRamen/21", "content": "Exploiting the legendary EternalBlue (CVE-2017-0144) vulnerability in this TryHackMe machine.\n\n#pentest #tryhackme \nhttps://telegra.ph/Blue-09-22-4", "creation_timestamp": "2022-09-24T16:16:40.000000Z"}, {"uuid": "9a5832c3-ec81-4fb1-84b6-3746d3d4c562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "Telegram/kabkSjcaer5upRB0Ibwq9GK8VGQatVOtX1VoUjYbdl2MlGc", "content": "", "creation_timestamp": "2025-07-10T21:00:04.000000Z"}, {"uuid": "25fbf0c2-ebcc-4f83-86ac-4f4fdba515ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://t.me/cyberbannews_ir/4014", "content": "\u200d \ud83d\uded1\u0646\u0641\u0648\u0630 \u0647\u06a9\u0631\u0647\u0627 \u0628\u0647 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u06cc \u0628\u0627 \u062d\u0645\u0644\u0627\u062a \u0628\u0631\u0648\u062a \u0641\u0648\u0631\u0633\n\n \u0645\u062d\u0642\u0642\u0627\u0646 \u06a9\u0633\u067e\u0631\u0633\u06a9\u06cc \u0628\u0627 \u0627\u0646\u062a\u0634\u0627\u0631 \u06af\u0632\u0627\u0631\u0634\u06cc \u062f\u0631 \u0645\u0648\u0631\u062f \u0631\u062e\u062f\u0627\u062f\u0647\u0627\u06cc \u0631\u0627\u06cc\u0627\u0646\u0647\u200c\u0627\u06cc \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0646\u062f \u062f\u0631 \u0633\u0627\u0644 2020 \u0647\u06a9\u0631\u0647\u0627 \u0628\u0631\u0627\u06cc \u0646\u0641\u0648\u0630 \u0628\u0647 \u0634\u0628\u06a9\u0647 \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627 \u0627\u063a\u0644\u0628 \u062d\u0645\u0644\u0627\u062a \u0628\u0631\u0648\u062a \u0641\u0648\u0631\u0633 \u0627\u0646\u062c\u0627\u0645 \u062f\u0627\u062f\u0647\u200c\u0627\u0646\u062f. \n\n\u062f\u0631 \u0633\u0627\u0644 2020 \u0645\u06cc\u0632\u0627\u0646 \u062d\u0645\u0644\u0627\u062a \u0628\u0631\u0648\u062a \u0641\u0648\u0631\u0633 \u062f\u0631 \u0633\u0631\u0627\u0633\u0631 \u062c\u0647\u0627\u0646 \u0628\u0647 \u0639\u0644\u062a \u0627\u0646\u062a\u0642\u0627\u0644 \u06af\u0633\u062a\u0631\u062f\u0647 \u06a9\u0627\u0631\u06a9\u0646\u0627\u0646 \u0634\u0631\u06a9\u062a\u200c\u0647\u0627 \u0628\u0647 \u062f\u0648\u0631\u06a9\u0627\u0631\u06cc \u062f\u0631 \u0632\u0645\u0627\u0646 \u0647\u0645\u0647\u200c\u06af\u06cc\u0631\u06cc \u0648 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06a9\u0631\u0631 \u0627\u0632 \u067e\u0631\u0648\u062a\u06a9\u0644 \u0622\u0631\u062f\u06cc\u200c\u067e\u06cc (RDP) \u0627\u0632 13% \u0628\u0647 32 \u062f\u0631\u0635\u062f \u0627\u0641\u0632\u0627\u06cc\u0634\u200c\u06cc\u0627\u0641\u062a\u0647 \u0627\u0633\u062a. \n\n\u0628\u0647 \u06af\u0641\u062a\u0647 \u0645\u062d\u0642\u0642\u0627\u0646\u060c \u062d\u0645\u0644\u0627\u062a\u06cc \u06a9\u0647 \u0628\u0627 \u062d\u062f\u0633 \u067e\u0633\u0648\u0631\u062f \u0622\u063a\u0627\u0632 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f\u060c \u0628\u0647 \u0644\u062d\u0627\u0638 \u0646\u0638\u0631\u06cc \u0628\u0647\u200c\u0622\u0633\u0627\u0646\u06cc \u0642\u0627\u0628\u0644 \u062a\u0634\u062e\u06cc\u0635 \u0647\u0633\u062a\u0646\u062f\u060c \u0627\u0645\u0627 \u062f\u0631 \u0639\u0645\u0644\u060c \u062a\u0646\u0647\u0627 \u0628\u062e\u0634 \u06a9\u0648\u0686\u06a9\u06cc \u0627\u0632 \u0622\u0646\u200c\u0647\u0627 \u0631\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u067e\u06cc\u0634 \u0627\u0632 \u0648\u0627\u0631\u062f \u0622\u0645\u062f\u0646 \u062e\u0633\u0627\u0631\u062a \u0645\u062a\u0648\u0642\u0641 \u06a9\u0631\u062f. \n\n\u062f\u0648\u0645\u06cc\u0646 \u0631\u0648\u0634 \u0645\u062a\u062f\u0627\u0648\u0644 \u0647\u06a9\u0631\u0647\u0627 \u0628\u0631\u0627\u06cc \u0646\u0641\u0648\u0630 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u067e\u0633 \u0627\u0632 \u0628\u0631\u0648\u062a \u0641\u0648\u0631\u0633\u060c \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0648\u062f\u0647 \u0627\u0633\u062a. \u0645\u06cc\u0632\u0627\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 31.5 \u062f\u0631\u0635\u062f \u0628\u0648\u062f\u0647 \u0627\u0633\u062a. \u062f\u0631 \u0627\u06a9\u062b\u0631 \u0645\u0648\u0627\u0631\u062f\u060c \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0645\u0634\u0647\u0648\u0631 \u0648 \u0648\u0635\u0644\u0647 \u0646\u0634\u062f\u0647 \u062f\u0631 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u06cc \u0647\u0645\u0686\u0648\u0646 CVE-2019-11510 \u060cCVE-2018-8453 \u0648 CVE-2017-0144 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f. \n\n#\u06a9\u0633\u067e\u0631\u0633\u06a9\u06cc\n\n@cyberbannews_ir", "creation_timestamp": "2021-09-25T08:25:18.000000Z"}, {"uuid": "aaae7f58-0d3b-49e8-ace5-6e15fee9a677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://t.me/kasperskyb2b/1287", "content": "\ud83d\udccc \u0421\u0430\u043c\u044b\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0420\u0424 \u0438 \u0421\u041d\u0413\n \n\u041c\u043e\u0436\u043d\u043e \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u043e \u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043a\u0430\u043a \u0433\u043e\u0440\u0438\u0442 \u043e\u0433\u043e\u043d\u044c, \u0442\u0435\u0447\u0451\u0442 \u0432\u043e\u0434\u0430 \u0438 \u0445\u0430\u043a\u0435\u0440\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 CVE-2017-0144 (\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0437 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f MS17-010). \u0412 \u043d\u0430\u0448\u0435\u043c \u043e\u0442\u0447\u0451\u0442\u0435 \u043e \u043b\u0430\u043d\u0434\u0448\u0430\u0444\u0442\u0435 \u0443\u0433\u0440\u043e\u0437 \u0432 \u0420\u0424 \u0438 \u0421\u041d\u0413 \u0435\u0451 \u0434\u0430\u0436\u0435 \u043f\u0440\u0438\u0448\u043b\u043e\u0441\u044c \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438\u0437 \u0442\u043e\u043f-10 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u043d\u0430\u0447\u0435 \u0432\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0442\u0440\u0443\u0434\u043d\u043e \u0431\u044b\u043b\u043e \u0431\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043d\u0430 \u0433\u0440\u0430\u0444\u0438\u043a\u0435. \u041f\u043e\u0447\u0435\u043c\u0443 \u044d\u0442\u0430 \u0434\u044b\u0440\u0430 \u0441\u0435\u043c\u0438\u043b\u0435\u0442\u043d\u0435\u0439 \u0434\u0430\u0432\u043d\u043e\u0441\u0442\u0438 \u0432\u0441\u0451 \u0435\u0449\u0451 \u043d\u0430\u0445\u043e\u0434\u0438\u0442 \u0441\u0432\u043e\u0438\u0445 \u0436\u0435\u0440\u0442\u0432 \u2014 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0433\u0440\u0443\u0441\u0442\u043d\u044b\u0439 \u0440\u0430\u0437\u0433\u043e\u0432\u043e\u0440. \u0410 \u043f\u043e\u043a\u0430 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0441\u0432\u0435\u0436\u0438\u0435 \u0434\u0435\u0444\u0435\u043a\u0442\u044b, \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u043b\u044f \u0442\u0435\u0445, \u043a\u0442\u043e \u043f\u0430\u0442\u0447\u0438\u0442\u0441\u044f \u0447\u0430\u0449\u0435.\n \n\ud83d\udd0e C\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0432 \u043e\u0442\u0447\u0451\u0442\u043d\u043e\u043c \u043f\u0435\u0440\u0438\u043e\u0434\u0435 \u0447\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Log4j, Windows Server (Bluekeep) \u0438 \u0441\u0435\u0440\u0432\u0438\u0441 OpenSMTPD.\n \n\ud83d\udcbb \u0410 \u0432\u043e\u0442 \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0432\u0441\u044e \u0433\u043e\u0440\u044f\u0447\u0443\u044e \u0442\u0440\u043e\u0439\u043a\u0443 \u0437\u0430 \u044d\u0442\u043e\u0442 \u043f\u0435\u0440\u0438\u043e\u0434 \u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043b\u0438 \u0430\u0440\u0445\u0438\u0432\u0430\u0442\u043e\u0440\u044b \u2014 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b \u0434\u0432\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u0432 7zip \u0438 \u043e\u0434\u0438\u043d \u0432 WinRAR. \u0417\u0430\u0442\u043e \u043c\u0435\u0441\u0442\u0430 \u0441 4 \u043f\u043e 10 \u0431\u0435\u0437\u0440\u0430\u0437\u0434\u0435\u043b\u044c\u043d\u043e \u0437\u0430\u043d\u0438\u043c\u0430\u0435\u0442 Google Chrome.\n\u041f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0441\u0435 CVE \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0438\u0441\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n \n\u0411\u043e\u043b\u0435\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437, \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432 \u0432 \u0440\u0430\u0437\u043d\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0430\u0445 \u0440\u0435\u0433\u0438\u043e\u043d\u0430 \u0438 \u0441\u043e\u0432\u0435\u0442\u044b \u0437\u0430\u0449\u0438\u0442\u043d\u0438\u043a\u0430\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u043f\u043e\u043b\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0442\u0447\u0451\u0442\u0430.\n \n\u0421\u043a\u0430\u0447\u0430\u0442\u044c \u043e\u0442\u0447\u0451\u0442\n \n#\u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 #\u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437\u044b @\u041f2\u0422", "creation_timestamp": "2024-05-29T08:33:06.000000Z"}, {"uuid": "42e0574e-2f21-474a-aee9-1f7501e5e30a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://t.me/arpsyndicate/1872", "content": "#ExploitObserverAlert\n\nCVE-2017-0148\n\nDESCRIPTION: Exploit Observer has 58 entries related to CVE-2017-0148. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0146.\n\nFIRST-EPSS: 0.971740000\nNVD-IS: 5.9\nNVD-ES: 2.2", "creation_timestamp": "2023-12-18T00:36:29.000000Z"}, {"uuid": "0b22598b-20ca-4b13-a25c-a96f30a41cce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://t.me/arpsyndicate/1955", "content": "#ExploitObserverAlert\n\nCVE-2017-0146\n\nDESCRIPTION: Exploit Observer has 58 entries related to CVE-2017-0146. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, and CVE-2017-0148.\n\nFIRST-EPSS: 0.971460000\nNVD-IS: 5.9\nNVD-ES: 2.2", "creation_timestamp": "2023-12-18T09:21:38.000000Z"}, {"uuid": "68ca69ff-bdb3-4b7a-a6a4-43a01d8d0f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://t.me/arpsyndicate/1901", "content": "#ExploitObserverAlert\n\nCVE-2017-0145\n\nDESCRIPTION: Exploit Observer has 75 entries related to CVE-2017-0145. The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka \"Windows SMB Remote Code Execution Vulnerability.\" This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0144, CVE-2017-0146, and CVE-2017-0148.\n\nFIRST-EPSS: 0.972700000\nNVD-IS: 5.9\nNVD-ES: 2.2", "creation_timestamp": "2023-12-18T03:32:12.000000Z"}, {"uuid": "9a75a8ed-6dab-46f8-8c8b-c6bd95bf6228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "Telegram/1n2fROMf6I7Wv387p2J29DCLWRThyaiFYhxdgIgWSfEj2iI", "content": "", "creation_timestamp": "2025-02-03T22:00:06.000000Z"}, {"uuid": "2db7a6e3-5b1d-4036-85a8-9ccd793262a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "Telegram/9yRu18wVcdo-jDIZNKg2f5wxw7yXOCp1IcMsr9T5Qawtbow", "content": "", "creation_timestamp": "2024-04-16T12:10:47.000000Z"}, {"uuid": "6a10d482-5e83-4fe4-b669-a07b9335541a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://t.me/true_secator/3836", "content": "\u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b IBM Security X-Force \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u043b\u0438 Microsoft \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0441\u0442\u0435\u043f\u0435\u043d\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2022\u00a0\u0433\u043e\u0434\u0430, \u043f\u043e\u0432\u044b\u0441\u0438\u0432 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0434\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f, \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0435\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f RCE.\n\n\u041e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2022-37958 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,1) \u0440\u0430\u043d\u0435\u0435 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u043b\u0430\u0441\u044c \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438\u00a0\u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 SPNEGO Extended Negotiation (NEGOEX).\n\nSimple and Protected GSSAPI Negotiation Mechanism (SPNEGO) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0441\u0445\u0435\u043c\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0443 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0434\u043e\u0441\u0442\u0438\u0447\u044c \u043a\u043e\u043d\u0441\u0435\u043d\u0441\u0443\u0441\u0430 \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0432\u044b\u0431\u043e\u0440\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, Kerberos \u0438\u043b\u0438 NTLM) \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041d\u043e\u00a0\u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c IBM Security X-Force \u0412\u0430\u043b\u0435\u043d\u0442\u0438\u043d\u043e\u0439 \u041f\u0430\u043b\u044c\u043c\u0438\u043e\u0442\u0442\u0438, \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u043f\u0435\u0440\u0435\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432\u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u044d\u0442\u043e\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 RCE \u0447\u0435\u0440\u0435\u0437 \u043b\u044e\u0431\u043e\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0432\u043a\u043b\u044e\u0447\u0430\u044f HTTP, SMB \u0438 RDP.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, IBM \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0434\u043e \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043a\u0432\u0430\u0440\u0442\u0430\u043b\u0430 2023 \u0433\u043e\u0434\u0430, \u0447\u0442\u043e\u0431\u044b \u0434\u0430\u0442\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0434\u043b\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\nMicrosoft \u0432 \u0441\u0432\u043e\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u0442\u0430\u043a\u0436\u0435, \u0447\u0442\u043e \u0443\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043a\u0438 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0440\u0435\u0434\u044b \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430.\n\n\u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0432 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2017-0144), \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u043e\u0439\u00a0EternalBlue \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 WannaCry, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b SMB, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u043e\u0445\u0432\u0430\u0442.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044c \u0431\u043e\u043b\u0435\u0435 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u0441\u0438\u0441\u0442\u0435\u043c Windows \u0438\u0437-\u0437\u0430 \u0431\u043e\u043b\u0435\u0435 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0439 \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0432 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 (HTTP, RDP, SMB) \u0438\u043b\u0438 \u0432\u043e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0435\u0442\u044f\u0445.", "creation_timestamp": "2022-12-16T11:41:17.000000Z"}, {"uuid": "9ed5da8e-bab0-4742-8bdd-6c0c2d1efbba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://t.me/true_secator/2579", "content": "Eternal Silence \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f Universal Plug and Play (UPnP) \u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u044f \u0438\u0445 \u0432 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a.\n\n\u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b UPnP \u043f\u043e\u043c\u0438\u043c\u043e \u0443\u0434\u043e\u0431\u0441\u0442\u0432\u0430 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0435\u0440\u0435\u0430\u0434\u0440\u0435\u0441\u0430\u0446\u0438\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u0441\u0435\u0442\u0438, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c \u0434\u043b\u044f \u0430\u0442\u0430\u043a, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0443\u0431\u044a\u0435\u043a\u0442\u0430\u043c \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u0435\u0440\u0435\u0430\u0434\u0440\u0435\u0441\u0430\u0446\u0438\u0438 \u043f\u043e\u0440\u0442\u043e\u0432 UPnP \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0435 WAN-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u0418\u043c\u0435\u043d\u043d\u043e \u0442\u0430\u043a\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0434 \u0443\u0441\u043b\u043e\u0432\u043d\u044b\u043c \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435\u043c UPnProxy \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Akamai, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0432\u0448\u0438\u0435 \u0437\u0430 \u0430\u043a\u0442\u043e\u0440\u043e\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0441\u043a\u0440\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438.\n\nAkamai \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043b\u043f\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 EternalBlue (CVE-2017-0144) \u0438 EternalRed (CVE-2017-7494) \u0432 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows \u0438 Linux \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 Akamai \u043f\u0440\u0435\u0434\u0440\u0435\u043a\u0430\u044e\u0442 \u0441\u043a\u043e\u0440\u043e\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438. \u041e\u0434\u043d\u0430\u043a\u043e \u0446\u0438\u0444\u0440\u044b \u0433\u043e\u0432\u043e\u0440\u044f\u0442 \u043e\u0431 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u043c: \u0438\u0437 3\u00a0500\u00a0000 UPnP-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432, \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0432 \u0441\u0435\u0442\u0438, 277\u00a0000 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f UPnProxy, \u0430 45\u00a0113 \u0438\u0437 \u043d\u0438\u0445 \u0443\u0436\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u044b \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, Eternal Silence \u2014 \u043e\u0447\u0435\u043d\u044c \u0445\u0438\u0442\u0440\u0430\u044f \u0430\u0442\u0430\u043a\u0430, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u043e\u043d\u0430 \u0434\u0435\u043b\u0430\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0443 \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0438 \u043d\u0435\u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0438 \u043d\u0435 \u0434\u0430\u0435\u0442 \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0441 \u0436\u0435\u0440\u0442\u0432\u043e\u0439. \u041b\u0443\u0447\u0448\u0438\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c, \u0431\u044b\u043b\u0438 \u043b\u0438 \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u2014 \u044d\u0442\u043e \u043f\u0440\u043e\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0442\u043e\u0447\u043a\u0438 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u0442\u0430\u0431\u043b\u0438\u0446\u0435 NAT.\n\n\u0415\u0441\u0442\u044c \u043c\u043d\u043e\u0433\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u044d\u0442\u043e, \u043d\u043e Akamai \u0443\u0434\u043e\u0431\u043d\u043e \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u044d\u0442\u043e\u0442 bash-\u0441\u043a\u0440\u0438\u043f\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e URL-\u0430\u0434\u0440\u0435\u0441\u0430.\n\n\u0418 \u0435\u0441\u043b\u0438 \u0432\u044b \u0432\u0441\u0435 \u0436\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Eternal Silence \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e, \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 UPnP \u043d\u0435 \u043e\u0447\u0438\u0441\u0442\u0438\u0442 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 NAT.\u00a0\u0412\u043c\u0435\u0441\u0442\u043e \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0438\u043b\u0438 \u043f\u0440\u043e\u0448\u0438\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e.", "creation_timestamp": "2022-02-01T18:44:27.000000Z"}, {"uuid": "73f13b20-cf2d-41d1-a378-ac66a41392ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://t.me/NeKaspersky/1753", "content": "\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u00abEternal scilence\u00bb \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 UPnP \u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u0440\u043e\u0443\u0442\u0435\u0440\u044b \u0432 \u043f\u0440\u043e\u043a\u0441\u0438 \u0434\u043b\u044f \u0441\u043e\u043a\u0440\u044b\u0442\u0438\u044f \u0434\u0440\u0443\u0433\u043e\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\n\nUPnP (universal plug and play) - \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b, \u043e\u043f\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432; \u043e\u043d \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u0440\u0443\u0433\u0438\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0432 \u0441\u0435\u0442\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043f\u0440\u043e\u0431\u0440\u043e\u0441\u0430 \u043f\u043e\u0440\u0442\u043e\u0432, \u0447\u0442\u043e\u0431\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0435\u0432\u0430\u0439\u0441\u0430\u043c \u0432\u043d\u0443\u0442\u0440\u0438 \u0441\u0435\u0442\u0438 \u043f\u043e \u043c\u0435\u0440\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438. \u0422\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f, \u043e\u0434\u043d\u0430\u043a\u043e, \u0434\u0430\u043b\u0435\u043a\u043e \u043d\u0435 \u0441\u0442\u043e\u043b\u044c \u0436\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430, \u0441\u043a\u043e\u043b\u044c \u0443\u0434\u043e\u0431\u043d\u0430: \u0437\u0430 \u0432\u0440\u0435\u043c\u044f \u0435\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0438\u043c\u043f\u043b\u0435\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u044f\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0445\u043e\u0434\u0435 \u0434\u0430\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438, \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u043e\u0439 Akamai (\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u043c\u0438 \u0435\u0435) \u00abUPnProxy\u00bb.\n\n\u0415\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u0434\u043e\u043a\u043b\u0430\u0434\u0443, 277,000 \u0438\u0437 3,500,000 \u0440\u043e\u0443\u0442\u0435\u0440\u043e\u0432 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0434\u0430\u043d\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445, \u0438 45,113 \u0443\u0436\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 EternalBlue (CVE-2017-0144) \u0438 EternalRed (CVE-2017-7494) \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f RCE \u043d\u0430 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0445 windows \u0438 Linux \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441\u043e\u043e\u0442\u0432\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e. \u0414\u0430\u043b\u0435\u0435 \u0441\u043e\u0437\u0434\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u043b\u044f \u043f\u0440\u043e\u0431\u0440\u043e\u0441\u0430 \u043f\u043e\u0440\u0442\u043e\u0432 \u0441 \u0437\u0430\u0431\u0430\u0432\u043d\u043e\u0439 \u0444\u0440\u0430\u0437\u043e\u0439 - \u00abgalleta silenciosa\u00bb (\u0442\u0438\u0445\u0430\u044f \u043f\u0435\u0447\u0435\u043d\u044c\u043a\u0430 \u0432 \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0435 \u0441 \u0438\u0441\u043f\u0430\u043d\u0441\u043a\u043e\u0433\u043e).\n\nAkamai \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 bash-\u0441\u043a\u0440\u0438\u043f\u0442, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0447\u0438\u0441\u0442\u0438\u0442\u044c \u0443\u0436\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u0432\u0430\u0439\u0441\u044b.\n@NeKaspersky", "creation_timestamp": "2022-01-31T19:14:02.000000Z"}, {"uuid": "f267fbe6-1a7f-41b0-8003-02ed29818179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://t.me/jokerplstaeen/16429", "content": "\u200f\ud83d\udca5 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \"CVE-2022-1388\"\ud83e\udeb2\ud83e\uddd1\u200d\ud83d\udcbb\n\u0623\u062d\u064a\u0627\u0646\u0627\u064b \u0646\u0633\u0645\u0639 \u0623\u062e\u0628\u0627\u0631 \u0645\u062b\u0644 \u0627\u0644\u062e\u0628\u0631 \u0627\u0644\u062a\u0627\u0644\u064a:\n\n\u25aa\ufe0f\u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641 \u062b\u063a\u0631\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a \u0623\u062c\u0647\u0632\u0629 F5 Big-IP \u0628\u0631\u0642\u0645: 1388-2022-CVE \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u062e\u062a\u0631\u0642 \u0641\u064a \u0627\u0644\u062a\u062d\u0643\u0645 \u0627\u0644\u0643\u0627\u0645\u0644 \u0628\u0627\u0644\u0646\u0638\u0627\u0645 \u0639\u0646 \u0628\u0639\u062f\u060c \u0648\u062a\u0645 \u0625\u0639\u0637\u0627\u0621 \u0627\u0644\u062b\u063a\u0631\u0629 \u062a\u0642\u064a\u064a\u0645 \u062e\u0637\u0648\u0631\u0629 10/10.\n\n\ud83d\udccd\u0639\u0644\u0649 \u0645\u0627\u0630\u0627 \u064a\u062f\u0644 \u0647\u0630\u0627 \u0627\u0644\u0631\u0642\u0645\u061f \u0648\u0645\u0627 \u0647\u0648 \u0645\u0639\u0646\u0627\u0647\u061f.. \"CVE-2022-1388\"\n\n\ud83d\udccd\u0627\u0644 \"CVE-2022-1388\" \u0647\u0648 \u0627\u062e\u062a\u0635\u0627\u0631 \u0644 Common Vulnerabilities and Exposures \u0648\u0647\u0648 \u0645\u0648\u0642\u0639 \u0639\u0627\u0644\u0645\u064a \u0644\u062a\u0639\u0631\u064a\u0641 \u0648\u0641\u0647\u0631\u0633\u0629 \u062c\u0645\u064a\u0639 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0641\u064a \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \u0648\u0627\u0644\u0643\u0634\u0641 \u0639\u0646\u0647\u0627 \u0639\u0644\u0646\u0627\u064b \u0648\u0646\u0634\u0631\u0647\u0627 \u0648\u064a\u0648\u062c\u062f \u0644\u0643\u0644 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u0645\u0643\u062a\u0634\u0641\u0629 \u0645\u0639\u0631\u0641 \u0631\u0642\u0645\u064a \u0641\u0631\u064a\u062f (CVE-YYY-NNNN)\n\n\ud83d\udccd\u0648\u0647\u064a \u0633\u0646\u0629 \u0627\u0644\u0646\u0634\u0631 \u0623\u0648 \u0627\u0644\u0633\u0646\u0629 \u0627\u0644\u062a\u064a \u0627\u0643\u062a\u0634\u0641\u062a \u0641\u064a\u0647\u0627 \u0627\u0644\u062b\u063a\u0631\u0629 \u0645\u062b\u0627\u0644:\n\n\"Stuxnet Worm: CVE-2010-2772\"\n\u25aa\ufe0f\u0647\u0646\u0627 \u0641\u0627\u064a\u0631\u0648\u0633 \"\u0633\u062a\u0648\u0643\u0633\u0646\u062a\" \u062a\u0645 \u0627\u0644\u0643\u0634\u0641 \u0639\u0646\u0647 \u0641\u064a 2010.\n\n\"WannaCry: CVE-2017-0144\"\n\u25aa\ufe0f\u0647\u0646\u0627 \u0647\u062c\u0648\u0645 \u0644\u0644\u0641\u062f\u064a\u0629 \u062a\u0645 \u0627\u0644\u0643\u0634\u0641 \u0639\u0646\u0647 \u0641\u064a 2017.\n\n\ud83d\udccd\u064a\u0639\u062a\u0628\u0631 \u0627\u0644 \"CVE-2022-1388\" \u0647\u0648 \u0645\u0639\u0631\u0641 \u0631\u0642\u0645\u064a CVE \u0641\u0631\u064a\u062f \u0644\u0644\u062b\u063a\u0631\u0629\u060c \u0644\u0627 \u064a\u062a\u0643\u0631\u0631 \u064a\u062a\u0643\u0648\u0646 \u0645\u0646 4 \u0623\u0631\u0642\u0627\u0645\u060c \u0648\u0623\u062d\u064a\u0627\u0646\u0627\u064b \u0625\u0644\u0649 5 \u0623\u06487 \u0623\u0631\u0642\u0627\u0645 \u0647\u0630\u0627 \u0627\u0644\u0631\u0642\u0645 \u064a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0648\u0635\u0641 \u0644\u0644\u062b\u063a\u0631\u0629 \u0648\u0627\u0644\u062a\u0627\u0631\u064a\u062e \u0648\u0622\u062e\u0631 \u062a\u062d\u0631\u064a\u0631\u060c \u0648\u0646\u0648\u0639 \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0648\u0645\u0627 \u0627\u0644\u0623\u062c\u0647\u0632\u0629 \u0627\u0644\u0645\u062a\u0636\u0631\u0631\u0629 \u0628\u0637\u0631\u064a\u0642\u0629 \u0645\u0628\u0627\u0634\u0631\u0629 \u0623\u0648 \u063a\u064a\u0631 \u0645\u0628\u0627\u0634\u0631\u0629 \u0648\u0627\u0644\u0645\u0631\u0627\u062c\u0639 \u0648\u062a\u0635\u0646\u064a\u0641 \u062e\u0637\u0648\u0631\u0629 \u0627\u0644\u062b\u063a\u0631\u0629.", "creation_timestamp": "2023-05-05T17:24:10.000000Z"}, {"uuid": "702417ee-f02e-4bbd-9e72-96fe33bce824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "Telegram/n7wRicylc66WfbR0mdLwehKvlM-QwtHoFxwz1W2HjLMRaPw", "content": "", "creation_timestamp": "2026-04-29T15:00:06.000000Z"}, {"uuid": "d40a7048-0506-499a-bc1e-c5e9a08db8a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://t.me/CyberSecurityTechnologies/585", "content": "#exploit\n1. CVE-2019-18922:\nDirectory Traversal in Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3\nhttps://seclists.org/fulldisclosure/2019/Nov/31\n\n2. CVE-2017-0143, CVE-2017-0144,\nCVE-2017-0145, CVE-2017-0146,\nCVE-2017-0147, CVE-2017-0148:\nSMB/RDP Doublepulsar - RCE\nhttps://packetstormsecurity.com/files/156196/smb_doublepulsar_rce.rb.txt\n]-> https://packetstormsecurity.com/files/156200/rdp_doublepulsar_rce.rb.txt", "creation_timestamp": "2024-10-15T16:10:08.000000Z"}, {"uuid": "38f98265-badc-4b82-b29b-bc70ef939e02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/39f3133c-25fe-4ac9-b1d6-0193f14f0e45", "content": "", "creation_timestamp": "2026-05-07T22:15:09.000000Z"}, {"uuid": "7456827f-ec7f-49a0-b122-88933a8ad927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "Telegram/7nTr5Boy9ceRZIwzvInsdCdZXiKVxwAmx2LZ99vpiVTDaKQ", "content": "", "creation_timestamp": "2026-08-29T23:00:14.902388Z"}, {"uuid": "cebfa1e5-072e-48fd-ba3c-b100aecceaa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "Telegram/6_gD9pQtVCg_eRlU_-Eqvw6JM83wq5C4Rc0rf2uF-yzttPU", "content": "", "creation_timestamp": "2026-05-13T09:00:04.000000Z"}, {"uuid": "95bf75c7-aa3e-47c2-8c8c-6d0a8c3145f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "Telegram/AkMjO0d4XZqfVGgzEJqq-1PMGLIsOlbA3Cz-sSO3dLyKMj4", "content": "", "creation_timestamp": "2026-05-13T07:00:14.000000Z"}, {"uuid": "66af95fc-2468-4c96-9924-9b7c777edf38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "published-proof-of-concept", "source": "Telegram/7nTr5Boy9ceRZIwzvInsdCdZXiKVxwAmx2LZ99vpiVTDaKQ", "content": "", "creation_timestamp": "2026-08-31T00:00:44.603506Z"}, {"uuid": "f5ae7b14-61b8-4e2b-becc-d0e704a2031a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mszphtqxqm2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2017-0144: The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Wi\u2026\nCVSS 8.8 \u00b7 EPSS 99.2% \u00b7 CISA KEV \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2017-0144\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-08-14T08:10:48.264884Z"}, {"uuid": "189a46dc-6c6f-4a65-8cb2-7a84bd393f25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://gist.github.com/GustavoLopreto/2028a93a87ebc86d6cb797b2b5907f4d", "content": "#!/usr/bin/env python3\n\"\"\"\nCYMAG Nmap Analyzer v3.0\nEquipe CYMAG | SENAI Seguranca Cibernetica 2026\nUso: python3 cymag_analyzer.py scan.xml -o relatorio.txt --csv achados.csv\n\"\"\"\n\nimport xml.etree.ElementTree as ET\nimport argparse, csv, sys\nfrom datetime import datetime\n\nPORTAS_CRITICAS = {\n    445:  {\"s\": \"SMB\",          \"r\": \"CRITICO\", \"cve\": \"CWE-300 / CVE-2017-0144\", \"d\": \"SMB exposto - vetor primario de ransomware (EternalBlue/WannaCry)\"},\n    3389: {\"s\": \"RDP\",          \"r\": \"ALTO\",    \"cve\": \"CVE-2019-0708\",           \"d\": \"RDP exposto - BlueKeep, brute force facilitado sem NLA\"},\n    389:  {\"s\": \"LDAP\",         \"r\": \"ALTO\",    \"cve\": \"CWE-862\",                 \"d\": \"LDAP - bind anonimo pode expor estrutura do Active Directory\"},\n    88:   {\"s\": \"Kerberos\",     \"r\": \"ALTO\",    \"cve\": \"CWE-287\",                 \"d\": \"Kerberos - AS-REP Roasting e Kerberoasting possiveis\"},\n    1880: {\"s\": \"Node-RED\",     \"r\": \"CRITICO\", \"cve\": \"CWE-306\",                 \"d\": \"Node-RED sem autenticacao padrao - painel IoT acessivel livremente\"},\n    1883: {\"s\": \"MQTT\",         \"r\": \"CRITICO\", \"cve\": \"CWE-306\",                 \"d\": \"MQTT Broker sem autenticacao e sem TLS - mensagens IoT expostas\"},\n    3307: {\"s\": \"MySQL\",        \"r\": \"CRITICO\", \"cve\": \"CVE-2012-5627\",           \"d\": \"MySQL 5.5.62 - EOL desde 2018, sem patches, multiplas CVEs abertas\"},\n    80:   {\"s\": \"HTTP\",         \"r\": \"MEDIO\",   \"cve\": \"CWE-319\",                 \"d\": \"HTTP sem TLS - dados trafegam em texto claro\"},\n    22:   {\"s\": \"SSH\",          \"r\": \"BAIXO\",   \"cve\": \"N/A\",                     \"d\": \"SSH exposto - versao recente, verificar configuracao de acesso\"},\n    5985: {\"s\": \"WinRM\",        \"r\": \"ALTO\",    \"cve\": \"CWE-284\",                 \"d\": \"WinRM - gerenciamento remoto Windows exposto\"},\n    135:  {\"s\": \"RPC\",          \"r\": \"MEDIO\",   \"cve\": \"CWE-284\",                 \"d\": \"RPC Endpoint Mapper - enumeracao de servicos Windows possivel\"},\n    139:  {\"s\": \"NetBIOS\",      \"r\": \"MEDIO\",   \"cve\": \"CWE-200\",                 \"d\": \"NetBIOS - LLMNR poisoning, vazamento de informacoes de rede\"},\n    5040: {\"s\": \"Desconhecido\", \"r\": \"MEDIO\",   \"cve\": \"N/A\",                     \"d\": \"Servico nao identificado na porta 5040 - investigar\"},\n}\n\nORDEM = [\"CRITICO\", \"ALTO\", \"MEDIO\", \"BAIXO\"]\n\ndef parse_nmap(arquivo):\n    try:\n        tree = ET.parse(arquivo)\n    except FileNotFoundError:\n        print(f\"[ERRO] Arquivo nao encontrado: {arquivo}\")\n        sys.exit(1)\n    except ET.ParseError as e:\n        print(f\"[ERRO] XML invalido: {e}\")\n        sys.exit(1)\n    root = tree.getroot()\n    alertas = []\n    for host in root.findall(\"host\"):\n        addr_el = host.find(\"address[@addrtype='ipv4']\")\n        if addr_el is None:\n            continue\n        ip = addr_el.get(\"addr\", \"N/A\")\n        hostname_el = host.find(\".//hostname\")\n        hostname = hostname_el.get(\"name\", \"\") if hostname_el is not None else \"\"\n        for port in host.findall(\".//port\"):\n            estado = port.find(\"state\")\n            if estado is None or estado.get(\"state\") != \"open\":\n                continue\n            portid = int(port.get(\"portid\", 0))\n            proto = port.get(\"protocol\", \"tcp\")\n            svc = port.find(\"service\")\n            nome_svc = svc.get(\"name\", \"?\") if svc is not None else \"?\"\n            produto   = svc.get(\"product\", \"\") if svc is not None else \"\"\n            versao    = svc.get(\"version\", \"\") if svc is not None else \"\"\n            ver_completa = f\"{produto} {versao}\".strip()\n            if portid in PORTAS_CRITICAS:\n                info = PORTAS_CRITICAS[portid]\n                alertas.append({\n                    \"ip\": ip, \"hostname\": hostname, \"porta\": portid,\n                    \"proto\": proto, \"servico\": nome_svc, \"versao\": ver_completa,\n                    \"risco\": info[\"r\"], \"cve\": info[\"cve\"], \"descricao\": info[\"d\"],\n                })\n    return sorted(alertas, key=lambda x: (ORDEM.index(x[\"risco\"]), x[\"ip\"], x[\"porta\"]))\n\ndef gerar_relatorio(alertas, arquivo_saida=None):\n    agora = datetime.now().strftime(\"%d/%m/%Y %H:%M\")\n    L = []\n    L.append(\"=\" * 70)\n    L.append(\"  CYMAG -- RELATORIO DE PORTAS CRITICAS\")\n    L.append(f\"  Gerado em: {agora}\")\n    L.append(\"  Equipe CYMAG | SENAI Seguranca Cibernetica 2026\")\n    L.append(\"  Rede analisada: 10.10.100.0/24\")\n    L.append(\"=\" * 70)\n    risco_atual = None\n    for a in alertas:\n        if a[\"risco\"] != risco_atual:\n            risco_atual = a[\"risco\"]\n            L.append(f\"\\n{'\u2500' * 70}\")\n            L.append(f\"  [ {risco_atual} ]\")\n            L.append(f\"{'\u2500' * 70}\")\n        host = a[\"ip\"] + (f\" ({a['hostname']})\" if a[\"hostname\"] else \"\")\n        L.append(f\"\\n  Host    : {host}\")\n        L.append(f\"  Porta   : {a['porta']}/{a['proto']}  ({a['servico']} {a['versao']})\".rstrip())\n        L.append(f\"  CVE/CWE : {a['cve']}\")\n        L.append(f\"  Risco   : {a['descricao']}\")\n    contagem = {r: sum(1 for a in alertas if a[\"risco\"] == r) for r in ORDEM}\n    L.append(f\"\\n{'=' * 70}\")\n    L.append(f\"  RESUMO  -- Total de alertas: {len(alertas)}\")\n    for r in ORDEM:\n        if contagem[r]:\n            L.append(f\"    {r:<10}: {contagem[r]} alerta(s)\")\n    L.append(\"=\" * 70)\n    texto = \"\\n\".join(L)\n    if arquivo_saida:\n        with open(arquivo_saida, \"w\", encoding=\"utf-8\") as f:\n            f.write(texto)\n        print(f\"[OK] Relatorio salvo em: {arquivo_saida}\")\n    else:\n        print(texto)\n    return texto\n\ndef gerar_csv(alertas, arquivo_csv):\n    campos = [\"ip\",\"hostname\",\"porta\",\"proto\",\"servico\",\"versao\",\"risco\",\"cve\",\"descricao\"]\n    with open(arquivo_csv, \"w\", newline=\"\", encoding=\"utf-8\") as f:\n        w = csv.DictWriter(f, fieldnames=campos)\n        w.writeheader()\n        w.writerows(alertas)\n    print(f\"[OK] CSV salvo em: {arquivo_csv}\")\n\ndef main():\n    parser = argparse.ArgumentParser(description=\"CYMAG Nmap Analyzer\")\n    parser.add_argument(\"xml\", help=\"Arquivo XML do Nmap\")\n    parser.add_argument(\"-o\", \"--output\", help=\"Salvar relatorio em .txt\")\n    parser.add_argument(\"--csv\", help=\"Exportar para CSV\")\n    parser.add_argument(\"--only-critical\", action=\"store_true\", help=\"Mostrar so CRITICO e ALTO\")\n    args = parser.parse_args()\n    alertas = parse_nmap(args.xml)\n    if args.only_critical:\n        alertas = [a for a in alertas if a[\"risco\"] in (\"CRITICO\", \"ALTO\")]\n    if not alertas:\n        print(\"[INFO] Nenhuma porta critica encontrada.\")\n        sys.exit(0)\n    gerar_relatorio(alertas, args.output)\n    if args.csv:\n        gerar_csv(alertas, args.csv)\n\nif __name__ == \"__main__\":\n    main()", "creation_timestamp": "2026-06-08T02:37:18.000000Z"}, {"uuid": "9e452e55-a5e5-4c02-8144-adf97ada6b7e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/62a8d73d-8cc9-43fd-a5fa-f197fdf9290b", "content": "", "creation_timestamp": "2026-06-19T12:47:39.614382Z"}, {"uuid": "0557ec45-07c3-4481-8591-f2287f8c8a8d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/361b832c-4394-4afc-a8ad-69feedde45f3", "content": "", "creation_timestamp": "2026-06-23T14:04:55.926310Z"}, {"uuid": "43ec254f-bab7-4f1e-92b1-3b3ba4caf923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://bsky.app/profile/pedri77.bsky.social/post/3mss24l7tr227", "content": "EternalBlue (CVE-2017-0144): exploit NSA filtrado por Shadow Brokers. WannaCry infecto 200K+ sistemas en 150 paises. 8 anos despues sigue siendo explotado.\nhttps://malwareintel.es/blog/vulnerabilidades/eternalblue-ms17-010/\n#Ciberseguridad #ThreatIntel\n", "creation_timestamp": "2026-08-11T07:00:03.707083Z"}, {"uuid": "d74c2d8a-8683-4a71-97f0-7901f67f33dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://t.me/ddos_guard/1274", "content": "\u200bCVSS: \u043d\u0430 \u043a\u0430\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0438\u0437\u043d\u0435\u0441\u0443 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c\n\n\u041c\u044b \u0443\u0436\u0435 \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438\u0441\u044c, \u0447\u0442\u043e \u0442\u0430\u043a\u043e\u0435 CVSS \u0438 \u0437\u0430\u0447\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u044d\u0442\u043e\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442. \u0422\u0435\u043f\u0435\u0440\u044c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u043c, \u043a\u0430\u043a \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0438 \u043a\u0430\u043a\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u0442\u043e\u0438\u0442 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0443\u0440\u043e\u0432\u043d\u044f \u0440\u0438\u0441\u043a\u0430.\n\n\u041a\u0430\u043a \u0447\u0438\u0442\u0430\u0442\u044c \u0448\u043a\u0430\u043b\u0443:\n\n\ud83d\udfe2 1\u20133,9 \u2014 \u043d\u0438\u0437\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u043d\u043e \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0449\u0435\u0440\u0431 \u043d\u0435\u0432\u0435\u043b\u0438\u043a\u0438. \u0422\u0430\u043a\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0431\u044b\u0447\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\ud83d\udfe1 4\u20136,9 \u2014 \u0441\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0447\u0430\u0441\u0442\u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u0441\u043b\u043e\u0432\u0438\u044f \u2014 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438\u043b\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0436\u0435\u0440\u0442\u0432\u043e\u0439.\n\n\ud83d\udfe0 7\u20138,9 \u2014 \u0432\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c\n\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f, \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043b\u0443\u0447\u0448\u0435 \u043d\u0435 \u043e\u0442\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0442\u044c. \u041f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u0438\u043c\u0435\u0440 \u2014 EternalBlue (CVE-2017-0144). \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 8,1, \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432\u0438\u0440\u0443\u0441\u0430-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f WannaCry \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\ud83d\udd34 9\u201310 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c\n\u041c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442. \u0422\u0430\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0430\u0441\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439. \u0421\u0430\u043c\u044b\u0439 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043f\u0440\u0438\u043c\u0435\u0440 \u2014 Log4Shell (CVE-2021-44228). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 10 \u0431\u0430\u043b\u043b\u043e\u0432 CVSS, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0412\u0430\u0436\u043d\u043e \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u043e\u0446\u0435\u043d\u043a\u0430 CVSS \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043d\u043e \u043d\u0435 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0432\u044b\u0441\u043e\u043a\u0438\u043c \u0431\u0430\u043b\u043b\u043e\u043c \u043c\u043e\u0436\u0435\u0442 \u043d\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0432\u0430\u0448\u0435\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0435\u0441\u043b\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442. \u0418 \u043d\u0430\u043e\u0431\u043e\u0440\u043e\u0442 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u043e \u0441\u0440\u0435\u0434\u043d\u0438\u043c \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0439 \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u0430\u0436\u043d\u044b\u043c \u0431\u0438\u0437\u043d\u0435\u0441-\u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u0434\u043d\u043e\u0439 \u043e\u0446\u0435\u043d\u043a\u0438 CVSS \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0440\u0438\u0441\u043a\u0430. \u041f\u0440\u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b DDoS-Guard \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u044b\u0435 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u044b \u0438 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0438 \u043e\u0446\u0435\u043d\u043a\u0438 \u0440\u0438\u0441\u043a\u043e\u0432. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b \u0434\u043b\u044f \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u043a\u043e\u043d\u043e\u0434\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u0420\u0424 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u041a\u0418\u0418, \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\nCVSS \u043f\u043e\u043c\u043e\u0433\u0430\u0435\u0442 \u043f\u043e\u043d\u044f\u0442\u044c, \u0441 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u0430\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u043d\u043e \u043e\u043a\u043e\u043d\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u044b \u0432\u0441\u0435\u0433\u0434\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u044e\u0442\u0441\u044f \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.", "creation_timestamp": "2026-07-14T01:00:06.577468Z"}, {"uuid": "e5ba43fe-472b-4bb9-afd5-a8bd0ffedc45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://t.me/hacking_Attack/117684", "content": "Kali Linux Tutorials\nScan4All: A Next-Gen Automated Vulnerability Detection Security Tool\n\nScan4All is at the vanguard of modern cybersecurity solutions, offering a comprehensive suite of tools for automated vulnerability detection and threat analysis.\n\nBuilt on a robust Golang framework, this cross-platform toolkit seamlessly integrates with various systems, elevating the standard for next-generation security measures. Features\n\n* What Is Scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent team tools? Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. \n* In principle, do not repeat the wheel unless there are bugs or problems\n* Cross-Platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc.\n\n* Support [23] password blasting, support custom dictionary, open by \u201cpriorityNmap\u201d: true\n\n* RDP\n* VNC\n* SSH\n* Socks5\n* rsh-spx\n* Mysql\n* MsSql\n* Oracle\n* Postgresql\n* Redis\n* FTP\n* Mongodb\n\n* SMB also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), and SmbGhost (CVE-2020-0796)\n\n* Telnet\n* Snmp\n* Wap-wsp (Elasticsearch)\n* RouterOs\n* HTTP BasicAuth (authorization)  contains the WebdavSVN (Apache Subversion) crack\n* Weblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detection\n* Tomcat\n* Jboss\n* Winrm(wsman)\n* POP3/POP3S\n* By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual intervention\n* Detect whether there is nmap in the system and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan.\n\n* Disadvantages of using nmap: Is the network bad because the traffic network packet is too large, which may lead to incomplete results? Using nmap additionally requires setting the root password to an environment variable export PPSSWWDD=yourRootPswd More references: config/doNmapScan.sh By default, naabu is used to complete port scanning. Use -stats=true to view the scanning progress Can I not scan Ports? noScan=true ./scan4all -l list.txt -v\n# nmap result default noScan=true \n./scan4all -l nmapRssuilt.xml -v* With fast 15000+ POC detection capabilities, PoCs include:\n* nuclei POC Nuclei Templates: Top 10 Statistics\nTAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNTcve1430daffainfo631cves1407info1474http3858panel655dhiyaneshdk584exposed-panels662high1009file76edb563pikpikcu329vulnerabilities509medium818network51lfi509pdteam269technologies282critical478dns17xss491geeknik187exposures275low225wordpress419dwisiswant0169misconfiguration237unknown11exposure4070x_akoko165token-spray230cve2021352princechaddha151workflows189rce337ritikchaddha137default-logins103wp-plugin316pussycat0x133file76 \n281 Directories, 3922 Files\n\n* vscan POC \n* vscan POC includes: xray 2.0 300+ POC, go POC, etc.\n\n* scan4all POC\n* Support 7000+ web fingerprint scanning and identification: \n* httpx fingerprint \n* vscan fingerprint\n* Vscan Fingerprint: including EHoleFinger, LocalFinger, etc.\n\n* scan4all fingerprint\n\n* Support 146 protocols and 90000+ rule port scanning \n* Depends on protocols and fingerprints supported by nmap\n\n* Fast HTTP-sensitive file detection, customizable dictionary\n* Landing page detection\n* Supports multiple types of input: STDIN, HOST, IP, CIDR, URL, and TXT\n* Supports multiple output types: JSON, TXT, CSV, and STDOUT\n* Highly Integratable: Configurable unified storage of results in Elasticsearch [strongly recommended]\n* Smart SSL Analysis: \n* In-depth analysis will automatically correlate the scanning of domain names in SSL information, such as *.xxx.c[...]", "creation_timestamp": "2026-09-01T20:00:48.953886Z"}, {"uuid": "b738b786-cfd6-4a27-9dc6-2c0817c32ccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj_4aeIoADYB6Hgg", "content": "", "creation_timestamp": "2026-08-27T12:00:10.755762Z"}, {"uuid": "612b317d-9008-4d11-bbd5-5b27be29f357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "published-proof-of-concept", "source": "Telegram/ERt8GGFekkTS_ieiBVGmLfcxPIuM72rFTxS1aPb6SalOFNw", "content": "", "creation_timestamp": "2026-07-20T18:00:04.856219Z"}, {"uuid": "a219d267-26ae-47d3-a84d-85f67982ad67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "published-proof-of-concept", "source": "Telegram/9tpNlnwjVZVYwuWejBnBA-eWQSN8G2bIqRE_fuaoLBUZlFA", "content": "", "creation_timestamp": "2026-07-20T18:00:05.040191Z"}, {"uuid": "8803d47f-cff4-417c-8af3-1a3625d5c3c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "MISP/89fc5796-831d-4951-8283-821975790b72", "content": "", "creation_timestamp": "2026-07-22T00:15:02.824000Z"}, {"uuid": "860bd195-e0c8-4cea-be04-49542ccc26a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "published-proof-of-concept", "source": "Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj_4aeIoADYB6Hgg", "content": "", "creation_timestamp": "2026-08-29T00:00:16.124458Z"}, {"uuid": "3b6175ce-4461-47a8-a85e-bd9d9a35d22f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://t.me/KaitNews/7520", "content": "\u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0646 \u0628\u06cc\u0634 \u0627\u0632 \u06f5\u06f0\u06f0 \u0647\u0632\u0627\u0631 \u062f\u0633\u062a\u06af\u0627\u0647 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0628\u0627 \u0628\u0627\u062a\u200c\u0646\u062a Smominru\n\n\u0634\u0631\u06a9\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc Proofpoint \u06af\u0632\u0627\u0631\u0634 \u0645\u06cc\u200c\u062f\u0647\u062f: \u00ab\u06cc\u06a9 \u0628\u0627\u062a\u200c\u0646\u062a \u0628\u0627 \u062a\u0645\u0631\u06a9\u0632 \u0628\u0631 \u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0627\u0631\u0632 \u0645\u062c\u0627\u0632\u06cc \u0645\u0648\u0646\u0631\u0648 \u062a\u0648\u0627\u0646\u0633\u062a\u0647 \u0627\u0633\u062a \u062a\u0627 \u0627\u0645\u0631\u0648\u0632 \u0628\u06cc\u0634 \u0627\u0631 \u0646\u06cc\u0645 \u0645\u06cc\u0644\u06cc\u0648\u0646 \u062f\u0633\u062a\u06af\u0627\u0647 \u0631\u0627 \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u062f\u0647\u062f.\u00bb\n\u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0627\u0631\u0632 \u0645\u062c\u0627\u0632\u06cc \u0645\u0648\u0646\u0648\u0631\u0648 \u06a9\u0647 \u062a\u0648\u0633\u0637 \u0627\u06cc\u0646 \u0628\u0627\u062a\u200c\u0646\u062a \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u062f\u060c Ismo \u0646\u0627\u0645 \u062f\u0627\u0631\u062f \u06a9\u0647 \u0627\u0632 \u0627\u0648\u0627\u062e\u0631 \u0645\u0627\u0647 \u0645\u06cc \u0633\u0627\u0644 \u06f2\u06f0\u06f1\u06f7 \u0645\u06cc\u0644\u0627\u062f\u06cc \u062f\u0631 \u062d\u0627\u0644\u06cc \u06a9\u0647 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 EternalBlue \u062a\u0648\u0632\u06cc\u0639 \u0645\u06cc\u200c\u0634\u062f\u060c \u0645\u0634\u0627\u0647\u062f\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a\u061b EternalBlue \u06cc\u06a9 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 \u0622\u0698\u0627\u0646\u0633 \u0627\u0645\u0646\u06cc\u062a \u0645\u0644\u06cc \u0627\u0645\u0631\u06cc\u06a9\u0627 \u0627\u0633\u062a \u06a9\u0647 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u06cc CVE-\u06f2\u06f0\u06f1\u06f7-\u06f0\u06f1\u06f4\u06f4 \u0631\u0627 \u062f\u0631 \u062f\u0631\u06af\u0627\u0647 \u06f4\u06f4\u06f5 \u067e\u0631\u0648\u062a\u06a9\u0644 \u0628\u0644\u0648\u06a9 \u067e\u06cc\u0627\u0645 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 (SMB)  \u0648\u06cc\u0646\u062f\u0648\u0632 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f. \u0627\u06cc\u0646 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u067e\u06cc\u0634 \u0627\u0632 \u0627\u06cc\u0646 \u0646\u06cc\u0632 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u062c\u0647\u0627\u0646\u06cc \u062f\u06cc\u06af\u0631\u06cc \u0627\u0632 \u062c\u0645\u0644\u0647 \u0628\u0627\u062c\u200c\u0627\u0641\u0632\u0627\u0631 \u06af\u0631\u06cc\u0647 \u0648 \u0646\u0627\u062a\u200c\u067e\u062a\u06cc\u0627 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0628\u0648\u062f.\n\u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0628\u0631\u0627\u06cc \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0646 \u0627\u0647\u062f\u0627\u0641 \u062e\u0648\u062f \u0627\u0632 \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u0645\u062f\u06cc\u0631\u06cc\u062a \u0648\u06cc\u0646\u062f\u0648\u0632 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0631\u0648\u0634\u06cc \u0627\u062e\u06cc\u0631\u0627 \u062a\u0648\u0633\u0637 \u06cc\u06a9 \u06a9\u0650\u0631\u0645 \u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0627\u0631\u0632 \u0645\u062c\u0627\u0632\u06cc \u0628\u0647 \u0646\u0627\u0645 WannaMine \u0646\u06cc\u0632 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a\u060c \u062c\u0627\u0644\u0628 \u0627\u0633\u062a \u06a9\u0647 \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0646\u06cc\u0632 \u0627\u0632 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc EternalBlue \u0628\u0631\u0627\u06cc \u062a\u0648\u0632\u06cc\u0639 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f.", "creation_timestamp": "2026-07-26T07:01:52.384789Z"}, {"uuid": "ba2f29e2-da78-49a1-a942-94aad7778cca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://t.me/KaitNews/7520", "content": "\u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0646 \u0628\u06cc\u0634 \u0627\u0632 \u06f5\u06f0\u06f0 \u0647\u0632\u0627\u0631 \u062f\u0633\u062a\u06af\u0627\u0647 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0628\u0627 \u0628\u0627\u062a\u200c\u0646\u062a Smominru\n\n\u0634\u0631\u06a9\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc Proofpoint \u06af\u0632\u0627\u0631\u0634 \u0645\u06cc\u200c\u062f\u0647\u062f: \u00ab\u06cc\u06a9 \u0628\u0627\u062a\u200c\u0646\u062a \u0628\u0627 \u062a\u0645\u0631\u06a9\u0632 \u0628\u0631 \u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0627\u0631\u0632 \u0645\u062c\u0627\u0632\u06cc \u0645\u0648\u0646\u0631\u0648 \u062a\u0648\u0627\u0646\u0633\u062a\u0647 \u0627\u0633\u062a \u062a\u0627 \u0627\u0645\u0631\u0648\u0632 \u0628\u06cc\u0634 \u0627\u0631 \u0646\u06cc\u0645 \u0645\u06cc\u0644\u06cc\u0648\u0646 \u062f\u0633\u062a\u06af\u0627\u0647 \u0631\u0627 \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u062f\u0647\u062f.\u00bb\n\u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0627\u0631\u0632 \u0645\u062c\u0627\u0632\u06cc \u0645\u0648\u0646\u0648\u0631\u0648 \u06a9\u0647 \u062a\u0648\u0633\u0637 \u0627\u06cc\u0646 \u0628\u0627\u062a\u200c\u0646\u062a \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u062f\u060c Ismo \u0646\u0627\u0645 \u062f\u0627\u0631\u062f \u06a9\u0647 \u0627\u0632 \u0627\u0648\u0627\u062e\u0631 \u0645\u0627\u0647 \u0645\u06cc \u0633\u0627\u0644 \u06f2\u06f0\u06f1\u06f7 \u0645\u06cc\u0644\u0627\u062f\u06cc \u062f\u0631 \u062d\u0627\u0644\u06cc \u06a9\u0647 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 EternalBlue \u062a\u0648\u0632\u06cc\u0639 \u0645\u06cc\u200c\u0634\u062f\u060c \u0645\u0634\u0627\u0647\u062f\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a\u061b EternalBlue \u06cc\u06a9 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 \u0622\u0698\u0627\u0646\u0633 \u0627\u0645\u0646\u06cc\u062a \u0645\u0644\u06cc \u0627\u0645\u0631\u06cc\u06a9\u0627 \u0627\u0633\u062a \u06a9\u0647 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u06cc CVE-\u06f2\u06f0\u06f1\u06f7-\u06f0\u06f1\u06f4\u06f4 \u0631\u0627 \u062f\u0631 \u062f\u0631\u06af\u0627\u0647 \u06f4\u06f4\u06f5 \u067e\u0631\u0648\u062a\u06a9\u0644 \u0628\u0644\u0648\u06a9 \u067e\u06cc\u0627\u0645 \u06a9\u0627\u0631\u06af\u0632\u0627\u0631 (SMB)  \u0648\u06cc\u0646\u062f\u0648\u0632 \u0647\u062f\u0641 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f. \u0627\u06cc\u0646 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u067e\u06cc\u0634 \u0627\u0632 \u0627\u06cc\u0646 \u0646\u06cc\u0632 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u062c\u0647\u0627\u0646\u06cc \u062f\u06cc\u06af\u0631\u06cc \u0627\u0632 \u062c\u0645\u0644\u0647 \u0628\u0627\u062c\u200c\u0627\u0641\u0632\u0627\u0631 \u06af\u0631\u06cc\u0647 \u0648 \u0646\u0627\u062a\u200c\u067e\u062a\u06cc\u0627 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0628\u0648\u062f.\n\u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0628\u0631\u0627\u06cc \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0646 \u0627\u0647\u062f\u0627\u0641 \u062e\u0648\u062f \u0627\u0632 \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u0645\u062f\u06cc\u0631\u06cc\u062a \u0648\u06cc\u0646\u062f\u0648\u0632 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0631\u0648\u0634\u06cc \u0627\u062e\u06cc\u0631\u0627 \u062a\u0648\u0633\u0637 \u06cc\u06a9 \u06a9\u0650\u0631\u0645 \u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0627\u0631\u0632 \u0645\u062c\u0627\u0632\u06cc \u0628\u0647 \u0646\u0627\u0645 WannaMine \u0646\u06cc\u0632 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a\u060c \u062c\u0627\u0644\u0628 \u0627\u0633\u062a \u06a9\u0647 \u0627\u06cc\u0646 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0646\u06cc\u0632 \u0627\u0632 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc EternalBlue \u0628\u0631\u0627\u06cc \u062a\u0648\u0632\u06cc\u0639 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f.", "creation_timestamp": "2026-07-29T04:00:06.060610Z"}, {"uuid": "5a72e8d2-a097-41a3-ba25-c641fbb8823b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "Telegram/PjuRxPzvGjVabf4gPWbBh7F8WJi6OJ_k2WzpXql3KPPBgA", "content": "", "creation_timestamp": "2026-07-29T12:01:37.329971Z"}, {"uuid": "16886157-74db-4c5e-b844-27a5eee70bbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://t.me/hacking_Attack/70882", "content": "KitPloit - PenTest Tools!\nScan4All - Vuls Scan: 15000+PoCs; 21 Kinds Of Application Password Crack; 7000+Web Fingerprints; 146 Protocols And 90000+ Rules Port Scanning; Fuzz, HW, Awesome BugBounty...\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisTJxJ4U78kCBktVvucfEIDh57XmKW1q6sBmDzUOpTpKc8MJ-Cn1Hxzu4dBdCO86QZ2nWnmkzV_Pw8OkuBxyTJ28khyAkBnUeaBU8VHPHemkCET7Zps8erD1mh0n7aLwSm0kLSqxmLKtBTSRS_f8VFXlb6ZfoxUPrXkEERIJG_ngKJvbx_CqzTpbzZ2g/w640-h500/scan4all_4.png * What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent\u3002red team tools Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. In principle, do not repeat the wheel, unless there are bugs, problems\n* Cross-platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc.\n* Support [21] password blasting, support custom dictionary, open by \"priorityNmap\": true \n* RDP\n* SSH\n* rsh-spx\n* Mysql\n* MsSql\n* Oracle\n* Postgresql\n* Redis\n* FTP\n* Mongodb\n* SMB, also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), SmbGhost (CVE- 2020-0796)\n* Telnet\n* Snmp\n* Wap-wsp (Elasticsearch)\n* RouterOs\n* HTTP BasicAuth\n* Weblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detection\n* Tomcat\n* Jboss\n* Winrm(wsman)\n* POP3\n\n* By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual intervention\n* Detect whether there is nmap in the system, and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan Disadvantages of using nmap: Is the network bad, because the traffic network packet is too large, which may lead to incomplete results Using nmap additionally requires setting the root password to an environment variable export PPSSWWDD=yourRootPswd More references: config/doNmapScan.sh By default, naabu is used to complete port scanning -stats=true to view the scanning progress Can I not scan ports? noScan=true ./scan4all -l list.txt -v\n# nmap result default noScan=true \n./scan4all -l nmapRssuilt.xml -v* Fast 15000+ POC detection capabilities, PoCs include: \n* nuclei POC Nuclei Templates Top 10 statisticsTAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNTcve1294daffainfo605cves1277info1352http3554panel591dhiyaneshdk503exposed-panels600high938file76lfi486pikpikcu321vulnerabilities493medium766network50xss439pdteam269technologies266critical436dns17wordpress401geeknik187exposures254low211exposure355dwisiswant0169misconfiguration207unknown7cve20213220x_akoko154token-spray206rce313princechaddha147workflows187wp-plugin297pussycat0x128default-logins101tech282gy741126file76\n281 directories, 3922 files.\n\n* vscan POC \n* vscan POC includes: xray 2.0 300+ POC, go POC, etc.\n\n* scan4all POC\n\n* \nSupport 7000+ web fingerprint scanning, identification:\n\n* httpx fingerprint \n* vscan fingerprint\n* vscan fingerprint: including eHoleFinger, localFinger, etc.\n\n* scan4all fingerprint\n\n* \nSupport 146 protocols and 90000+ rule port scanning\n\n* Depends on protocols and fingerprints supported by nmap\n\n* \nFast HTTP sensitive file detection, can customize dictionary\n\n* \nLanding page detection\n\n* \nSupports multiple types of input - STDIN/HOST/IP/CIDR/URL/TXT\n\n* \nSupports multiple output types - JSON/TXT/CSV/STDOUT\n\n* \nHighly integratable: Configurable unified storage of results to Elasticsearch [strongly recommended]\n\n* \nSmart SSL Analysis:\n\n* In-depth analysis, automatically correlate the scanning of domain names in SSL information, such as *.xxx.com, and complete subdomain traversal according [...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:21.545390Z"}, {"uuid": "a3eff546-181d-48fa-932a-3c130c60b8c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://t.me/hacking_Attack/70875", "content": "What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent\u3002red team tools Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. In principle, do not repeat the wheel, unless there are bugs, problemsCross-platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc.Support [21] password blasting, support custom dictionary, open by \"priorityNmap\": true RDPSSHrsh-spxMysqlMsSqlOraclePostgresqlRedisFTPMongodbSMB, also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), SmbGhost (CVE- 2020-0796)TelnetSnmpWap-wsp (Elasticsearch)RouterOsHTTP BasicAuthWeblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detectionTomcatJbossWinrm(wsman)POP3By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual interventionDetect whether there is nmap in the system, and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan Disadvantages of using nmap: Is the network bad, because the traffic network packet is too large, which may lead to incomplete results Using nmap additionally requires setting the root password to an environment variable\n  export PPSSWWDD=yourRootPswd More references: config/doNmapScan.sh By default, naabu is used to complete port scanning (https://www.kitploit.com/search/label/Port%20Scanning) -stats=true to view the scanning progress Can I not scan ports?noScan=true ./scan4all -l list.txt -v\n# nmap result default noScan=true \n./scan4all -l nmapRssuilt.xml -vFast 15000+ POC detection capabilities, PoCs include: nuclei POCNuclei Templates Top 10 statisticsTAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNTcve1294daffainfo605cves1277info1352http3554panel591dhiyaneshdk503exposed-panels600high938file76lfi486pikpikcu321vulnerabilities493medium766network50xss439pdteam269technologies266critical436dns17wordpress401geeknik187exposures254low211exposure355dwisiswant0169misconfiguration207unknown7cve20213220x_akoko154token-spray206rce313princechaddha147workflows187wp-plugin297pussycat0x128default-logins101tech282gy741126file76281 directories, 3922 files.vscan POC vscan POC includes: xray 2.0 300+ POC, go POC, etc.scan4all POCSupport 7000+ web fingerprint scanning, identification:httpx fingerprint vscan fingerprintvscan fingerprint: including eHoleFinger, localFinger, etc.scan4all fingerprintSupport 146 protocols and 90000+ rule port scanningDepends on protocols and fingerprints supported by nmapFast HTTP sensitive file detection, can customize dictionaryLanding page detectionSupports multiple types of input - STDIN/HOST/IP/CIDR/URL/TXTSupports multiple output types - JSON/TXT/CSV/STDOUTHighly integratable: Configurable unified storage of results to Elasticsearch (https://www.kitploit.com/search/label/Elasticsearch) [strongly recommended]Smart SSL Analysis:In-depth analysis, automatically correlate the scanning of domain names in SSL information, such as *.xxx.com, and complete subdomain traversal according to the configuration, and the result will automatically add the target to the scanning listSupport to enable *.xx.com subdomain traversal function in smart SSL information, export EnableSubfinder=true, or adjust in the configuration fileAutomatically identify the case of multiple IPs associated with a domain (DNS), and automatically scan the associated multiple IPsSmart processing:When the IPs of multiple domain names in the list are the same, merge port scans to improve efficiencyIntelligently handle http abnormal pages, and fingerprint calculation and learningAutomated supply chain (https://www.kitploit.com/search/label/Supply%20Chain) identification, analysis\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:21.902301Z"}, {"uuid": "d58c6e30-273a-4eeb-879b-1a2b903e4ead", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "published-proof-of-concept", "source": "Telegram/Zg7xNPwQElgOazaR_8r2v4bs6d55u6MTShsUIaSZkGoRM78", "content": "", "creation_timestamp": "2026-09-02T10:00:05.982040Z"}, {"uuid": "c5adb7e8-dca9-4968-a2c5-0d431933bf63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/117684", "content": "Kali Linux Tutorials\nScan4All: A Next-Gen Automated Vulnerability Detection Security Tool\n\nScan4All is at the vanguard of modern cybersecurity solutions, offering a comprehensive suite of tools for automated vulnerability detection and threat analysis.\n\nBuilt on a robust Golang framework, this cross-platform toolkit seamlessly integrates with various systems, elevating the standard for next-generation security measures. Features\n\n* What Is Scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent team tools? Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. \n* In principle, do not repeat the wheel unless there are bugs or problems\n* Cross-Platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc.\n\n* Support [23] password blasting, support custom dictionary, open by \u201cpriorityNmap\u201d: true\n\n* RDP\n* VNC\n* SSH\n* Socks5\n* rsh-spx\n* Mysql\n* MsSql\n* Oracle\n* Postgresql\n* Redis\n* FTP\n* Mongodb\n\n* SMB also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), and SmbGhost (CVE-2020-0796)\n\n* Telnet\n* Snmp\n* Wap-wsp (Elasticsearch)\n* RouterOs\n* HTTP BasicAuth (authorization)  contains the WebdavSVN (Apache Subversion) crack\n* Weblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detection\n* Tomcat\n* Jboss\n* Winrm(wsman)\n* POP3/POP3S\n* By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual intervention\n* Detect whether there is nmap in the system and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan.\n\n* Disadvantages of using nmap: Is the network bad because the traffic network packet is too large, which may lead to incomplete results? Using nmap additionally requires setting the root password to an environment variable export PPSSWWDD=yourRootPswd More references: config/doNmapScan.sh By default, naabu is used to complete port scanning. Use -stats=true to view the scanning progress Can I not scan Ports? noScan=true ./scan4all -l list.txt -v\n# nmap result default noScan=true \n./scan4all -l nmapRssuilt.xml -v* With fast 15000+ POC detection capabilities, PoCs include:\n* nuclei POC Nuclei Templates: Top 10 Statistics\nTAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNTcve1430daffainfo631cves1407info1474http3858panel655dhiyaneshdk584exposed-panels662high1009file76edb563pikpikcu329vulnerabilities509medium818network51lfi509pdteam269technologies282critical478dns17xss491geeknik187exposures275low225wordpress419dwisiswant0169misconfiguration237unknown11exposure4070x_akoko165token-spray230cve2021352princechaddha151workflows189rce337ritikchaddha137default-logins103wp-plugin316pussycat0x133file76 \n281 Directories, 3922 Files\n\n* vscan POC \n* vscan POC includes: xray 2.0 300+ POC, go POC, etc.\n\n* scan4all POC\n* Support 7000+ web fingerprint scanning and identification: \n* httpx fingerprint \n* vscan fingerprint\n* Vscan Fingerprint: including EHoleFinger, LocalFinger, etc.\n\n* scan4all fingerprint\n\n* Support 146 protocols and 90000+ rule port scanning \n* Depends on protocols and fingerprints supported by nmap\n\n* Fast HTTP-sensitive file detection, customizable dictionary\n* Landing page detection\n* Supports multiple types of input: STDIN, HOST, IP, CIDR, URL, and TXT\n* Supports multiple output types: JSON, TXT, CSV, and STDOUT\n* Highly Integratable: Configurable unified storage of results in Elasticsearch [strongly recommended]\n* Smart SSL Analysis: \n* In-depth analysis will automatically correlate the scanning of domain names in SSL information, such as *.xxx.c[...]", "creation_timestamp": "2026-09-04T05:00:05.752999Z"}, {"uuid": "392dd1e6-b445-44a6-90c4-e46c11456640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/70875", "content": "What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent\u3002red team tools Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. In principle, do not repeat the wheel, unless there are bugs, problemsCross-platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc.Support [21] password blasting, support custom dictionary, open by \"priorityNmap\": true RDPSSHrsh-spxMysqlMsSqlOraclePostgresqlRedisFTPMongodbSMB, also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), SmbGhost (CVE- 2020-0796)TelnetSnmpWap-wsp (Elasticsearch)RouterOsHTTP BasicAuthWeblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detectionTomcatJbossWinrm(wsman)POP3By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual interventionDetect whether there is nmap in the system, and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan Disadvantages of using nmap: Is the network bad, because the traffic network packet is too large, which may lead to incomplete results Using nmap additionally requires setting the root password to an environment variable\n  export PPSSWWDD=yourRootPswd More references: config/doNmapScan.sh By default, naabu is used to complete port scanning (https://www.kitploit.com/search/label/Port%20Scanning) -stats=true to view the scanning progress Can I not scan ports?noScan=true ./scan4all -l list.txt -v\n# nmap result default noScan=true \n./scan4all -l nmapRssuilt.xml -vFast 15000+ POC detection capabilities, PoCs include: nuclei POCNuclei Templates Top 10 statisticsTAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNTcve1294daffainfo605cves1277info1352http3554panel591dhiyaneshdk503exposed-panels600high938file76lfi486pikpikcu321vulnerabilities493medium766network50xss439pdteam269technologies266critical436dns17wordpress401geeknik187exposures254low211exposure355dwisiswant0169misconfiguration207unknown7cve20213220x_akoko154token-spray206rce313princechaddha147workflows187wp-plugin297pussycat0x128default-logins101tech282gy741126file76281 directories, 3922 files.vscan POC vscan POC includes: xray 2.0 300+ POC, go POC, etc.scan4all POCSupport 7000+ web fingerprint scanning, identification:httpx fingerprint vscan fingerprintvscan fingerprint: including eHoleFinger, localFinger, etc.scan4all fingerprintSupport 146 protocols and 90000+ rule port scanningDepends on protocols and fingerprints supported by nmapFast HTTP sensitive file detection, can customize dictionaryLanding page detectionSupports multiple types of input - STDIN/HOST/IP/CIDR/URL/TXTSupports multiple output types - JSON/TXT/CSV/STDOUTHighly integratable: Configurable unified storage of results to Elasticsearch (https://www.kitploit.com/search/label/Elasticsearch) [strongly recommended]Smart SSL Analysis:In-depth analysis, automatically correlate the scanning of domain names in SSL information, such as *.xxx.com, and complete subdomain traversal according to the configuration, and the result will automatically add the target to the scanning listSupport to enable *.xx.com subdomain traversal function in smart SSL information, export EnableSubfinder=true, or adjust in the configuration fileAutomatically identify the case of multiple IPs associated with a domain (DNS), and automatically scan the associated multiple IPsSmart processing:When the IPs of multiple domain names in the list are the same, merge port scans to improve efficiencyIntelligently handle http abnormal pages, and fingerprint calculation and learningAutomated supply chain (https://www.kitploit.com/search/label/Supply%20Chain) identification, analysis\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T07:00:04.415569Z"}, {"uuid": "61127cbb-70ab-41e1-bc90-ab4204883bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/70882", "content": "KitPloit - PenTest Tools!\nScan4All - Vuls Scan: 15000+PoCs; 21 Kinds Of Application Password Crack; 7000+Web Fingerprints; 146 Protocols And 90000+ Rules Port Scanning; Fuzz, HW, Awesome BugBounty...\n\nhttps://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisTJxJ4U78kCBktVvucfEIDh57XmKW1q6sBmDzUOpTpKc8MJ-Cn1Hxzu4dBdCO86QZ2nWnmkzV_Pw8OkuBxyTJ28khyAkBnUeaBU8VHPHemkCET7Zps8erD1mh0n7aLwSm0kLSqxmLKtBTSRS_f8VFXlb6ZfoxUPrXkEERIJG_ngKJvbx_CqzTpbzZ2g/w640-h500/scan4all_4.png * What is scan4all: integrated vscan, nuclei, ksubdomain, subfinder, etc., fully automated and intelligent\u3002red team tools Code-level optimization, parameter optimization, and individual modules, such as vscan filefuzz, have been rewritten for these integrated projects. In principle, do not repeat the wheel, unless there are bugs, problems\n* Cross-platform: based on golang implementation, lightweight, highly customizable, open source, supports Linux, windows, mac os, etc.\n* Support [21] password blasting, support custom dictionary, open by \"priorityNmap\": true \n* RDP\n* SSH\n* rsh-spx\n* Mysql\n* MsSql\n* Oracle\n* Postgresql\n* Redis\n* FTP\n* Mongodb\n* SMB, also detect MS17-010 (CVE-2017-0143, CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, CVE-2017-0147, CVE-2017-0148), SmbGhost (CVE- 2020-0796)\n* Telnet\n* Snmp\n* Wap-wsp (Elasticsearch)\n* RouterOs\n* HTTP BasicAuth\n* Weblogic, enable nuclei through enableNuclei=true at the same time, support T3, IIOP and other detection\n* Tomcat\n* Jboss\n* Winrm(wsman)\n* POP3\n\n* By default, http password intelligent blasting is enabled, and it will be automatically activated when an HTTP password is required, without manual intervention\n* Detect whether there is nmap in the system, and enable nmap for fast scanning through priorityNmap=true, which is enabled by default, and the optimized nmap parameters are faster than masscan Disadvantages of using nmap: Is the network bad, because the traffic network packet is too large, which may lead to incomplete results Using nmap additionally requires setting the root password to an environment variable export PPSSWWDD=yourRootPswd More references: config/doNmapScan.sh By default, naabu is used to complete port scanning -stats=true to view the scanning progress Can I not scan ports? noScan=true ./scan4all -l list.txt -v\n# nmap result default noScan=true \n./scan4all -l nmapRssuilt.xml -v* Fast 15000+ POC detection capabilities, PoCs include: \n* nuclei POC Nuclei Templates Top 10 statisticsTAGCOUNTAUTHORCOUNTDIRECTORYCOUNTSEVERITYCOUNTTYPECOUNTcve1294daffainfo605cves1277info1352http3554panel591dhiyaneshdk503exposed-panels600high938file76lfi486pikpikcu321vulnerabilities493medium766network50xss439pdteam269technologies266critical436dns17wordpress401geeknik187exposures254low211exposure355dwisiswant0169misconfiguration207unknown7cve20213220x_akoko154token-spray206rce313princechaddha147workflows187wp-plugin297pussycat0x128default-logins101tech282gy741126file76\n281 directories, 3922 files.\n\n* vscan POC \n* vscan POC includes: xray 2.0 300+ POC, go POC, etc.\n\n* scan4all POC\n\n* \nSupport 7000+ web fingerprint scanning, identification:\n\n* httpx fingerprint \n* vscan fingerprint\n* vscan fingerprint: including eHoleFinger, localFinger, etc.\n\n* scan4all fingerprint\n\n* \nSupport 146 protocols and 90000+ rule port scanning\n\n* Depends on protocols and fingerprints supported by nmap\n\n* \nFast HTTP sensitive file detection, can customize dictionary\n\n* \nLanding page detection\n\n* \nSupports multiple types of input - STDIN/HOST/IP/CIDR/URL/TXT\n\n* \nSupports multiple output types - JSON/TXT/CSV/STDOUT\n\n* \nHighly integratable: Configurable unified storage of results to Elasticsearch [strongly recommended]\n\n* \nSmart SSL Analysis:\n\n* In-depth analysis, automatically correlate the scanning of domain names in SSL information, such as *.xxx.com, and complete subdomain traversal according [...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T07:00:04.683684Z"}, {"uuid": "41b2dc30-48da-44ce-bf18-41fcacca2d17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "exploited", "source": "https://t.me/codeby_sec/10421", "content": "87 \u0445\u043e\u0441\u0442\u043e\u0432, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0437\u043d\u0430\u043b \u043d\u0438 \u043e\u0434\u0438\u043d \u043e\u0442\u0434\u0435\u043b\n\n\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u044c\u0442\u0435: IT-\u0441\u043b\u0443\u0436\u0431\u0430 \u043b\u043e\u0433\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0443\u0432\u0435\u0440\u0435\u043d\u0430, \u0447\u0442\u043e \u0437\u043d\u0430\u0435\u0442 \u0441\u0432\u043e\u0439 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440. Nmap \u043d\u0430\u0445\u043e\u0434\u0438\u0442 340 \u0445\u043e\u0441\u0442\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u043f\u043e\u0440\u0442\u0430\u043c\u0438 \u2014 \u0440\u043e\u0432\u043d\u043e \u0441\u0442\u043e\u043b\u044c\u043a\u043e, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043e\u0436\u0438\u0434\u0430\u043b\u043e\u0441\u044c. \u0412\u0441\u0435 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u044b. \u0410 \u043f\u043e\u0442\u043e\u043c \u043f\u0430\u0441\u0441\u0438\u0432\u043d\u0430\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0430 \u0447\u0435\u0440\u0435\u0437 Certificate Transparency \u0438 Shodan \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u0435\u0449\u0451 87 \u0445\u043e\u0441\u0442\u043e\u0432. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u2014 \u0437\u0430\u0431\u044b\u0442\u044b\u0439 staging \u0441 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0439 Log4j, \u0434\u0432\u0430 \u043f\u043e\u0434\u0434\u043e\u043c\u0435\u043d\u0430 \u0441 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u044b\u043c WordPress \u0438 API-\u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u041f\u043e\u0447\u0435\u043c\u0443 Nmap \u0438\u0445 \u043d\u0435 \u0443\u0432\u0438\u0434\u0435\u043b? \u0427\u0430\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043e\u0432 \u043f\u0440\u044f\u0442\u0430\u043b\u0430\u0441\u044c \u0437\u0430 CDN, \u0447\u0430\u0441\u0442\u044c \u043d\u0435 \u0440\u0435\u0437\u043e\u043b\u0432\u0438\u043b\u0430\u0441\u044c \u0432 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 IP-\u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u044b. \u041f\u0440\u044f\u043c\u043e\u0439 SYN-\u0441\u043a\u0430\u043d \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0435 \u0437\u043d\u0430\u043b, \u043a\u0443\u0434\u0430 \u0441\u0442\u0443\u0447\u0430\u0442\u044c.\n\n\ud83d\udd0e\u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u043d\u0430 \u0432\u043e\u043f\u0440\u043e\u0441 \u00ab\u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u043e \u043d\u0430 \u044d\u0442\u0438\u0445 \u0430\u0434\u0440\u0435\u0441\u0430\u0445?\u00bb. \u041f\u0430\u0441\u0441\u0438\u0432\u043d\u0430\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0430 \u2014 \u043d\u0430 \u0432\u043e\u043f\u0440\u043e\u0441 \u00ab\u0430 \u043a\u0430\u043a\u0438\u0435 \u0432\u043e\u043e\u0431\u0449\u0435 \u0430\u0434\u0440\u0435\u0441\u0430 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0442?\u00bb. \u0411\u0435\u0437 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u0432\u044b \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u043e, \u0447\u0442\u043e \u0443\u0436\u0435 \u0437\u043d\u0430\u0435\u0442\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c RiskIQ, \u0441\u0440\u0435\u0434\u043d\u044f\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u044d\u043a\u0441\u043f\u043e\u043d\u0438\u0440\u0443\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 500 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u043a\u0442\u0438\u0432\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438, \u0438 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445 \u043d\u0435 \u0447\u0438\u0441\u043b\u044f\u0442\u0441\u044f \u0432 \u0438\u043d\u0432\u0435\u043d\u0442\u0430\u0440\u0435.\n\n\u27a1\ufe0f\u041d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435 \u0441\u0432\u044f\u0437\u043a\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 \u0434\u0432\u0430 \u044d\u0442\u0430\u043f\u0430:\n\n1. \u041f\u0430\u0441\u0441\u0438\u0432\u043d\u0430\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0430 \u0441\u0442\u0440\u043e\u0438\u0442 \u043a\u0430\u0440\u0442\u0443 attack surface \u0431\u0435\u0437 \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0430 \u043a \u0446\u0435\u043b\u0438. subfinder, amass, Shodan, Censys, Certificate Transparency \u2014 \u0432\u0441\u0451 \u044d\u0442\u043e \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u043f\u043e\u0434\u0434\u043e\u043c\u0435\u043d\u044b, IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0441\u0435\u0440\u0432\u0438\u0441\u044b, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 IT-\u043e\u0442\u0434\u0435\u043b \u043c\u043e\u0433 \u0437\u0430\u0431\u044b\u0442\u044c. \u041d\u0438 \u043e\u0434\u0438\u043d \u0444\u0430\u0439\u0440\u0432\u043e\u043b \u0438\u043b\u0438 IDS \u043d\u0435 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 \u044d\u0442\u0443 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0438\u0434\u0443\u0442 \u043a \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u0431\u0430\u0437\u0430\u043c, \u0430 \u043d\u0435 \u043a \u0432\u0430\u0448\u0435\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435.\n\n2. \u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u0435\u0442 \u043a\u0430\u0440\u0442\u0438\u043d\u0443. Nmap \u0441 \u0434\u0432\u0443\u0445\u0444\u0430\u0437\u043d\u044b\u043c \u043f\u043e\u0434\u0445\u043e\u0434\u043e\u043c: \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0431\u044b\u0441\u0442\u0440\u044b\u0439 -sS -p- --min-rate 5000 \u043f\u043e \u0432\u0441\u0435\u043c 65535 \u043f\u043e\u0440\u0442\u0430\u043c, \u0437\u0430\u0442\u0435\u043c \u0442\u043e\u0447\u0435\u0447\u043d\u044b\u0439 -sV -sC \u043f\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c. \u041f\u0435\u0440\u0432\u0430\u044f \u0444\u0430\u0437\u0430 \u0434\u0430\u0451\u0442 \u043a\u0430\u0440\u0442\u0443 \u0436\u0438\u0432\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432, \u0432\u0442\u043e\u0440\u0430\u044f \u2014 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e, \u0431\u0430\u043d\u043d\u0435\u0440\u044b, TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b.\n\n\ud83c\udfaf\u041e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u2014 NSE-\u0441\u043a\u0440\u0438\u043f\u0442 smb-vuln-ms17-010. \u041e\u043d \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 EternalBlue (CVE-2017-0144, CVSS 8.8) \u0437\u0430 \u0441\u0435\u043a\u0443\u043d\u0434\u044b. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 CISA KEV \u0441 \u043f\u043e\u043c\u0435\u0442\u043a\u043e\u0439 RANSOMWARE \u2014 \u0438 \u043e\u043d\u0430 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0430\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u043d\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0432\u0448\u0438\u0445 SMBv1.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435 \u043d\u0443\u0436\u0435\u043d \u0432\u0430\u0448 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440 \u0441 WAF \u0438 IDS. \u0415\u043c\u0443 \u043d\u0443\u0436\u0435\u043d \u0442\u043e\u0442 Jenkins \u043d\u0430 staging, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 DevOps \u0437\u0430\u0431\u044b\u043b \u0432\u044b\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u0433\u043e\u0434\u0430 \u043d\u0430\u0437\u0430\u0434. \u041f\u0430\u0441\u0441\u0438\u0432\u043d\u0430\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0430 \u043d\u0430\u0445\u043e\u0434\u0438\u0442 \u0438\u043c\u0435\u043d\u043d\u043e \u0442\u0430\u043a\u0438\u0435 \u0446\u0435\u043b\u0438. \u0410\u043a\u0442\u0438\u0432\u043d\u043e\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u043d\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b. \u041e\u0434\u043d\u043e \u0431\u0435\u0437 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u2014 \u0430\u0443\u0434\u0438\u0442 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u044b \u043f\u043b\u043e\u0449\u0430\u0434\u0438.\n\n\u041f\u043e\u043b\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0441 \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438, \u043f\u0440\u0438\u043c\u0435\u0440\u0430\u043c\u0438 \u0438 \u043f\u043e\u0448\u0430\u0433\u043e\u0432\u043e\u0439 \u043c\u0435\u0442\u043e\u0434\u043e\u043b\u043e\u0433\u0438\u0435\u0439 \u2014 \u0432 \u0441\u0442\u0430\u0442\u044c\u0435 \u043d\u0430 \u0444\u043e\u0440\u0443\u043c\u0435\u2b07\n\nhttps://codeby.net/threads/skanirovaniye-vneshnego-perimetra-kompanii-nmap-osint.95416/", "creation_timestamp": "2026-09-08T09:00:06.090685Z"}, {"uuid": "0e7968e4-5ab7-410c-92b2-6ae93a86abae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "published-proof-of-concept", "source": "Telegram/9tAdOzEYIDvrG2QScNTZT7Kho_3KPCsfNn3jkCN_YtF0uDc", "content": "", "creation_timestamp": "2026-09-10T18:00:05.962430Z"}, {"uuid": "5356ae41-3abe-40cf-bcaf-21612ffac70e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "Telegram/D3eLZVc7h2lGu52Jh8ruDiE9lwCScvdIOQI0bH64z2-tgu8", "content": "", "creation_timestamp": "2026-09-14T03:00:15.680725Z"}, {"uuid": "ea2d5966-f109-47a3-ae25-068f8374003c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvic4ag5r52u", "content": "CVE-2017-0144 is trending. Hype score 10, currently #5 on cvemon.\n\nThe SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold,\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2017-0144", "creation_timestamp": "2026-09-14T14:12:00.499479Z"}, {"uuid": "2f718146-60fa-4cd7-a2d8-86406016df9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://bsky.app/profile/dragstersystems.bsky.social/post/3mvijf6pqb22a", "content": "\u00bfQu\u00e9 es un CVE? \u00bfy por qu\u00e9 es clave en ciberseguridad?\n\n\u00ab\u00bfAlguna vez viste un c\u00f3digo como CVE-2017-0144 y no entendiste nada? No te preocupes, no solo a ti te pas\u00f3\u00bb\n\nV\u00eda: Aleida P\u00e9rez (Tripledobleu)", "creation_timestamp": "2026-09-14T16:22:19.018303Z"}, {"uuid": "3eb2c00f-e077-404d-a192-15805944933b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "published-proof-of-concept", "source": "Telegram/D3eLZVc7h2lGu52Jh8ruDiE9lwCScvdIOQI0bH64z2-tgu8", "content": "", "creation_timestamp": "2026-09-15T00:00:21.069430Z"}, {"uuid": "9f490531-d7e6-428e-965a-fb6986f3cc78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0144", "type": "seen", "source": "https://gist.github.com/utrawal9185-cmd/96e36077ce8085608c94f7b499c04cfd", "content": "---\ndescription: Use Shodan CLI to perform reconnaissance, asset discovery\n  and infrastructure intelligence for red team operations.\nhomepage: \"https://www.shodan.io\"\nmetadata:\n  author: jpacora\n  category: recon\n  openclaw:\n    homepage: \"https://www.shodan.io\"\n  tools:\n  - exec\n  - memory\nname: shodan-redteam-assistant\nuser-invocable: true\n---\n\n# Shodan Red Team Assistant\n\nThis skill enables the agent to perform internet-wide reconnaissance\nusing Shodan CLI to support red team operations.\n\nThe agent interacts conversationally with the user but executes\nreconnaissance tasks using the Shodan CLI through the `exec` tool.\n\nThis skill automatically:\n\n-   Detects if Shodan CLI is installed\n-   Installs it if missing (with user approval)\n-   Verifies API key configuration\n-   Stores state using memory\n-   Executes reconnaissance queries\n\n# Tools\n\nThis skill uses the following tools:\n\n-   exec \u2192 execute system commands\n-   memory \u2192 persist environment state in your MEMORY\n\nAll CLI commands must be executed via:\n\nexec(\"``{=html}\")\n\nNever simulate command output.\n\n# memory Keys\n\n  Key                     Meaning\n  ----------------------- ----------------------------\n  shodan_cli_installed    Shodan CLI binary exists\n  shodan_api_configured   API key already configured\n\n# Environment Validation Workflow\n\n## Step 1 --- Check memory\n\nmemoryGet(\"shodan_cli_installed\")\n\nIf TRUE \u2192 skip binary detection. If FALSE or NULL \u2192 check system.\n\n## Step 2 --- Detect Shodan CLI\n\nexec(\"which shodan\")\n\nIf found:\n\nmemorySet(\"shodan_cli_installed\", true)\n\nIf not found \u2192 determine OS.\n\n## Step 3 --- Detect Operating System\n\nexec(\"uname -a\") exec(\"cat /etc/os-release\")\n\n## Step 4 --- Installation (User Confirmation Required)\n\nThe agent must ask the user before installing.\n\nExample message:\n\n\"Shodan CLI is not installed. Would you like me to install it?\"\n\nPossible installation commands:\n\n### Debian / Ubuntu\n\nexec(\"sudo apt update && sudo apt install -y python3-pip\") exec(\"pip3\ninstall --user shodan\")\n\n### Arch Linux\n\nexec(\"sudo pacman -S python-pip\") exec(\"pip install --user shodan\")\n\n### macOS\n\nexec(\"brew install shodan\")\n\n### Generic Python Install\n\nexec(\"pip3 install --user shodan\")\n\nAfter installation:\n\nmemorySet(\"shodan_cli_installed\", true)\n\n# Step 5 --- Verify API Key\n\nexec(\"shodan info\")\n\nIf the command fails or requests initialization, ask the user:\n\n\"Please provide your Shodan API key so I can initialize the CLI.\"\n\nWhen the user provides a key:\n\nexec(\"shodan init USER_API_KEY\")\n\nThen store:\n\nmemorySet(\"shodan_api_configured\", true)\n\n# Failure Recovery\n\nIf a command returns:\n\nPlease run \"shodan init ``{=html}\"\n\nReset memory:\n\nmemorySet(\"shodan_api_configured\", false)\n\nThen request the API key again.\n\n# Example Queries\n\nFind exposed MongoDB servers:\n\nexec(\"shodan search 'port:27017' --fields ip_str,port,org\")\n\nFind Elasticsearch servers:\n\nexec(\"shodan search 'port:9200' --fields ip_str,port,org\")\n\nFind open RDP servers:\n\nexec(\"shodan search 'port:3389' --fields ip_str,port,org\")\n\nFind Grafana dashboards:\n\nexec(\"shodan search 'title:\\\"Grafana\\\"' --fields ip_str,port,org\")\n\nFind Jenkins servers:\n\nexec(\"shodan search 'product:Jenkins' --fields ip_str,port,org\")\n\nFind assets belonging to Google:\n\nexec(\"shodan search 'org:\\\"Google\\\"' --fields ip_str,port,org\")\n\nFind infrastructure in Germany:\n\nexec(\"shodan search 'country:DE' --fields ip_str,port\")\n\nFind systems vulnerable to Log4Shell:\n\nexec(\"shodan search 'vuln:CVE-2021-44228' --fields ip_str,port,org\")\n\nFind systems vulnerable to EternalBlue:\n\nexec(\"shodan search 'vuln:CVE-2017-0144' --fields ip_str,port,org\")\n\n# Example Pipeline\n\nExport Apache servers:\n\nexec(\"shodan search 'apache' --fields ip_str \\> targets.txt\")\n\n# Behavior Rules\n\nThe agent must:\n\n-   Always validate environment before using Shodan\n-   Use exec for every CLI command\n-   Persist environment state using memory\n-   Never install software without user confirmation\n-   Ask for the API key if not configured\n-   Use Shodan queries to support reconnaissance tasks\n-   Respond conversationally while executing commands programmatically", "creation_timestamp": "2026-09-29T12:43:22.000000Z"}]}