Top Tweets for #ciscoshellhell

@UK_Daniel_Card

almost 3 years ago

CISCO have released a patch! 17.9.4a is available! CVE-2023-20198 CVE-2023-20273 #CISCOShellHell #IOSXE https://t.co/YdLd2cNssw

UK_Daniel_Card's tweet photo. CISCO have released a patch!
17.9.4a is available!

CVE-2023-20198
CVE-2023-20273

#CISCOShellHell #IOSXE

https://t.co/YdLd2cNssw https://t.co/AQi5NXJdvi

4

88

51

12

21K

@UK_Daniel_Card

almost 3 years ago

👀👀👀👀👀👀👀👀 #CiscoShellHell

3

10

0

0

4K

@UK_Daniel_Card

almost 3 years ago

no new updates on this citrix article: https://t.co/Iu3fCdAQH0 #CiscoShellHell

UK_Daniel_Card's tweet photo. no new updates on this citrix article:

https://t.co/Iu3fCdAQH0

#CiscoShellHell https://t.co/hirJS5aDYf

5

7

0

0

3K

@UK_Daniel_Card

almost 3 years ago

Defenders it’s worth looking at this: Rapid7 have observed some slightly different and additional behaviour #CiscoShellHell #Cisco #exploits

Caitlin Condon @catc0n

almost 3 years ago

Rapid7 attacker behavior observations on Cisco IOS XE CVE-2023-20198 in our blog as of last night. One environment seems to have been hit w/ multiple instances of exploitation in a single day, with slightly varied techniques. https://t.co/VJJSGe62vL

0

60

28

16

21K

1

28

9

4

7K

@UK_Daniel_Card

almost 3 years ago

let's see if we see any noticeable changes today! #CiscoShellHell #CVE202320198 CVE-2023-20198

UK_Daniel_Card's tweet photo. let's see if we see any noticeable changes today!

#CiscoShellHell #CVE202320198
CVE-2023-20198 https://t.co/bB4CUY4dKs

@UK_Daniel_Card

almost 3 years ago

ok tweeps, we have a mass exploitation scenario which appears to have targeted: Cisco IOS XE Software Web Management User Interface (the HTTP server) This has installed an implant: which can be detected by running: curl -k -X POST "https[:]//DEVICEIP/webui/logoutconfirm.html?logon_hash=1" TALOS BLOG HERE: https://t.co/XdyqY6p8oz First thing is first: Situational Awareness: Do you have any devices running CISCO IOS XE and ARE THEY INTERNET FACING?

UK_Daniel_Card's tweet photo. ok tweeps, we have a mass exploitation scenario which appears to have targeted: Cisco IOS XE Software Web Management User Interface
(the HTTP server)

This has installed an implant:

which can be detected by running:
curl -k -X POST "https[:]//DEVICEIP/webui/logoutconfirm.html?logon_hash=1"

TALOS BLOG HERE: https://t.co/XdyqY6p8oz

First thing is first:

Situational Awareness: Do you have any devices running CISCO IOS XE and ARE THEY INTERNET FACING?

15

361

134

124

149K

1

4

0

0

4K

@UK_Daniel_Card

almost 3 years ago

baddie motherfuckers detected with @GreyNoiseIO 143.110.186.105 138.197.200.139 #Cisco #CiscoShellHell

UK_Daniel_Card's tweet photo. baddie motherfuckers detected with @GreyNoiseIO
143.110.186.105
138.197.200.139
#Cisco #CiscoShellHell https://t.co/FHvgquZfMx

4

52

6

5

14K

@UK_Daniel_Card

almost 3 years ago

Greynoise frens talking about #CiscoShellHell

almost 3 years ago

Storm Watch - Breaking News - 10/18/23 https://t.co/zCuvr340cC

3

14

6

3

14K

0

15

2

0

3K

@UK_Daniel_Card

almost 3 years ago

well shit.... this .... err.... could be awkward! just doing some investigations... BRB..... #CiscoShellHell #CISCO #IOS #WebShells #InitialAcces

@UK_Daniel_Card

almost 3 years ago

jumping around: (this is how it works in the real world.... it's not 123.... it's 9, 2, 1, 9 , 1, 5, ,6 ,3, 9201901, 1, 9 https://t.co/Nldf5OS1W2

UK_Daniel_Card's tweet photo. jumping around:
(this is how it works in the real world.... it's not 123....

it's 9, 2, 1, 9 , 1, 5, ,6 ,3, 9201901, 1, 9
https://t.co/Nldf5OS1W2 https://t.co/u9LmU3hNZN

2

6

0

1

5K

1

7

0

1

9K

@UK_Daniel_Card

almost 3 years ago

anyone at US DOD wanna take this one from me? #CISO #IOSXE #CiscoShellHell

UK_Daniel_Card's tweet photo. anyone at US DOD wanna take this one from me?

#CISO #IOSXE #CiscoShellHell https://t.co/11vA0useWM

9

25

3

0

7K

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users