Product
high
advisory
Web Server Outbound Connections to File Sharing Services
1 rule 2 TTPs 26 IOCsAttackers compromise web servers (Apache, Nginx, Tomcat, PHP) and leverage them to make unexpected outbound network connections to public file-sharing or content hosting services, indicating post-exploitation activity for ingress tool transfer and further compromise.
Apache HTTP Server +3
post-exploitation
ingress-tool-transfer
webshell
web-server
c2
windows
1r
2t
26i
medium
threat
Multiple Vulnerabilities in PHP Allow for Information Disclosure, DoS, SSRF, and Unknown Impacts
2 rules 3 TTPsA remote attacker can exploit multiple vulnerabilities in PHP to disclose information, cause a denial-of-service condition, perform a Server-Side Request Forgery (SSRF) attack, or achieve unknown impacts.
PHP
vulnerability
ssrf
dos
information-disclosure
2r
3t