Report - gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19520.zip

Report Overview

Submitted URL
gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19520.zip
IP
172.65.251.78
ASN
#13335 CLOUDFLARENET
Submitted
2024-05-10 18:28:13
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
gitlab.com	17719	2004-01-15	2014-06-06	2024-05-09	536 B	1.1 MB	172.65.251.78

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19520.zip
IP
172.65.251.78
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
1.1 MB (1056566 bytes)
Hash
29799d7c2341467826d9630af8e55fa8
e676c17b21f5a96fe278c0cdb32152357d5e10f6
86d6caae381ef38095dc163860a232ba735cc819e871d06ba7f5220da75fd8fc

Archive (58)

Filename

Md5

File type

FILES.txt

1a68112c3aa166aa77b0f270ccd71519

ASCII text, with CRLF line terminators

wolverine2

14b08488c8bb0a8aaec889e89b1b2ac6

ELF 32-bit LSB executable, Intel 80386, version 1 (FreeBSD)

wolverine2.tar

0e71cf7f707bbb63dbe0f3e2ce852358

POSIX tar archive

telnet.h

38ccba065dae8116cc7997ce4491877a

C source, ASCII text

EXAMPLE.txt

0f471148edd9558ea60f0cb3a5c4c41b

ASCII text

auth-proto.h

875431883f16a66b8f2306a7ecea1627

C source, ASCII text

auth.c

35d6662a82d14251f609338097755736

C source, ASCII text

auth.h

b51c441777813f2801ada6d7ec454a7e

C source, ASCII text

enc-proto.h

f705a40b73664b023fdbd8228b63be13

ASCII text

encrypt.c

0b1282d1340d7a84f87f46159efce607

C source, ASCII text

encrypt.h

1252b3a475a1018ee126ccc45f60ed72

C source, ASCII text

enc_des.c

38cb3da8280bff5b0a53775b63348e41

C source, ASCII text

genget.c

b098f71ef9e48bc5a7a1ddc368875d80

C source, ASCII text

getent.c

e74da07acac297f1150493c983a060db

C source, ASCII text

kerberos.c

bde2b362d3f17f54f08119662cfb4183

C source, ASCII text

kerberos5.c

0f784ab7aa669763822e307e1e9b08f4

C source, ASCII text

key-proto.h

f78be153eb05a3bd2ff96bbb5bd2600a

C source, ASCII text

krb4encpwd.c

9f01d28018c90ca56d64089a234efe0e

C source, ASCII text

misc-proto.h

e04a3eace88c4dcdb82fda1376ba459e

C source, ASCII text

misc.c

ff5f31037eeb17f1f68f2b9216cf9df2

C source, ASCII text

misc.h

7286443621b33d24be5d94b789c7298c

C source, ASCII text

pk.c

73508936bf44f499b210306773e5d0ac

C source, ASCII text

pk.h

d3978b5b6b11bd8b2c8e081e1cf46464

C source, ASCII text

read_password.c

9a1888ed5a556053be4c1acbcc912290

C source, ASCII text

rsaencpwd.c

2a58c3d01159f3838cbd17c824162a8d

C source, ASCII text

sra.c

dce77ae66881802cc583228daa42ad1b

C source, ASCII text

README.txt

c010761ee38b049330659d92ab6dea44

ISO-8859 text

authenc.c

00adc0a543ecf3806600eeb119542b80

C source, ASCII text

commands.c

cc0ef114f622b5b9caea99b99ddda086

C source, ASCII text

defines.h

023b0a7d4709e3abbb0448018ae4d9ce

ASCII text

externs.h

408ca91e1e4aa001635fe72d5a9d2b80

C source, ASCII text

fdset.h

e30d46eb270a5ff3fa391e66230f2110

C source, ASCII text

general.h

cb3a7e36a615d81cf00e621f9661f969

ASCII text

main.c

5a06380d06fd944ee74379fff5e63cb0

C source, ASCII text

network.c

e53a6d05b6c65ce2ed597925a6fa5512

C source, ASCII text

ring.c

ed23988ad86bb7dd3c5e302cbe88c561

C source, ASCII text

ring.h

06a8e5f244772ffab67bccd0c3c5ab01

C source, ASCII text

sys_bsd.c

a6064696aa79b2a595cdbc15c00de6f3

C source, ASCII text

targets.h

5a04ed67b52b954f45bfbd88cf08275d

ASCII text

telnet.1

8a5544689ebc4c5bf20c1d7ad08d6518

troff or preprocessor input, ASCII text

telnet.c

47b6c2585b88107d8a89608c20cfe305

C source, ASCII text

terminal.c

f0f892c0a838c8111e0e5eafd85fcafd

C source, ASCII text

types.h

c31c6dcc0efc1cbe6e036f322dc48c33

C source, ASCII text

utilities.c

8b6b69470c8a90bc3ce7cfb47ad8ed82

C source, ASCII text

authenc.c

c5e6d15fbc2254de2af8c6508bcad94b

C source, ASCII text

defs.h

00a026c979d87adbf6de2847f317c1f2

C source, ASCII text

ext.h

4820887f4dc2d8d9dba82136ab04fafd

C source, ASCII text

global.c

9b6edc45e7cdce2b265edbe1f21cc2e1

C source, ASCII text

pathnames.h

72d59c8225e529f6178423c276d537ee

C source, ASCII text

slc.c

0bb25bc706213b34ea512fb1826397a2

C source, ASCII text

state.c

8b3f7bb566a6bcce2d1ee799f182520b

C source, ASCII text

sys_term.c

6143629ad0f475feabc9f577e18c8fcf

C source, ASCII text

telnetd.8

c04a22e25c4b9fc22c567b2584544d0c

troff or preprocessor input, ASCII text

telnetd.c

40c346938aaae76d5319977caea74495

C source, ASCII text

telnetd.h

ac4ccb292211f3785ad4e88a7450ed2e

C source, ASCII text

termstat.c

1dfa48a9f4c1a2589fb07e4d776c74da

C source, ASCII text

utility.c

1530155319a9b83aaf26bf8c701b14c1

C source, ASCII text

telnetscan.c

29efbe75056ef5fe6b87e29ae61ed6ca

C source, ASCII text

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip
VirusTotal	malicious	VirusTotal - Scan result 25/62

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19520.zip

172.65.251.78

200 OK

1.1 MB

URL User Request GET HTTP/2
gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19520.zip
IP
172.65.251.78:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerSectigo Limited
Subjectgitlab.com
FingerprintF7:4E:F9:4C:4E:B4:FF:39:A2:19:F7:5D:40:CF:10:26:D7:E7:F2:99
ValidityFri, 12 Apr 2024 00:00:00 GMT - Sun, 11 May 2025 23:59:59 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
1.1 MB (1056566 bytes)
Hash
29799d7c2341467826d9630af8e55fa8
e676c17b21f5a96fe278c0cdb32152357d5e10f6
86d6caae381ef38095dc163860a232ba735cc819e871d06ba7f5220da75fd8fc

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 25/62

HTTP Headers

GET /exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/19520.zip HTTP/1.1
Host: gitlab.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 10 May 2024 18:27:46 GMT
content-type: application/octet-stream
content-length: 1056566
cache-control: max-age=60, public, must-revalidate, stale-while-revalidate=60, stale-if-error=300, s-maxage=60
content-disposition: attachment
content-security-policy: base-uri 'self'; child-src https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://www.googletagmanager.com/ns.html https://*.zuora.com/apps/PublicHostedPageLite.do https://gitlab.com/admin/ https://gitlab.com/assets/ https://gitlab.com/-/speedscope/index.html https://gitlab.com/-/sandbox/ 'self' https://gitlab.com/assets/ blob: data:; connect-src 'self' https://gitlab.com wss://gitlab.com https://sentry.gitlab.net https://new-sentry.gitlab.net https://customers.gitlab.com https://snowplow.trx.gitlab.net https://sourcegraph.com https://collector.prd-278964.gl-product-analytics.com snowplow.trx.gitlab.net; default-src 'self'; font-src 'self'; form-action 'self' https: http:; frame-ancestors 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://www.googletagmanager.com/ns.html https://*.zuora.com/apps/PublicHostedPageLite.do https://gitlab.com/admin/ https://gitlab.com/assets/ https://gitlab.com/-/speedscope/index.html https://gitlab.com/-/sandbox/; img-src 'self' data: blob: http: https:; manifest-src 'self'; media-src 'self' data: blob: http: https:; object-src 'none'; report-uri https://new-sentry.gitlab.net/api/4/security/?sentry_key=f5573e26de8f4293b285e556c35dfd6e&sentry_environment=gprd; script-src 'strict-dynamic' 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.recaptcha.net/ https://apis.google.com https://*.zuora.com/apps/PublicHostedPageLite.do 'nonce-8C0NyKzywQM6PpEGM8ELTw=='; style-src 'self' 'unsafe-inline'; worker-src 'self' https://gitlab.com/assets/ blob: data:
etag: "a249ab751fc9923d1dc8488b1d43c7c1"
permissions-policy: interest-cohort=()
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-gitlab-meta: {"correlation_id":"01HX9EJK22XMA4NS1B3KY0XKS0","version":"1"}
x-permitted-cross-domain-policies: none
x-request-id: 01HX9EJK22XMA4NS1B3KY0XKS0
x-runtime: 0.110728
x-ua-compatible: IE=edge
x-xss-protection: 1; mode=block
gitlab-lb: haproxy-main-26-lb-gprd
gitlab-sv: web-gke-us-east1-d
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IFl%2FAuFwnaWF3wNU4%2F%2F6laJDPg0VOtYhErw8BA%2FYsbld8090v9SfGmIbM9Lwo9vbhzQB4TjtKHgHDtKAEb%2F0%2BOlx0JXEHLjORglFmYh8NIOrABwbkMbDjzy2B80%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000
set-cookie: _cfuvid=vBAEs2Gj6hQNLmuW4BaYlAJmn1teoNgEiiaRaS1RFwk-1715365666912-0.0.1.1-604800000; path=/; domain=.gitlab.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 881bfc39292c7128-OSL
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (58)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers