Okey dokey, this is speech and this is about city details and exploit DBI, so what exactly we are
going to learn in decision, it's all about knowing how the world know what one lability just popped
up.
All right.
So let's get started.
So as of now, we we know what is a vulnerability and how how it really impact the system as well.
Now we know about that.
Usually it is published with a specific number or by the next and or the platform details that I show
you as well.
But let's get started with some fundamentals first about the publications.
Right.
To see me is the common vulnerabilities and exposure that DCB details tell about you.
And it is visible on CBDs.
The way it is defined is the specific.
You're the first part of the KVI is identified, but the year it has been detected.
So whatever, irrespective of the platform, irrespective of the software, hardware or any technology
are always available.
It will start with TV and the year it has detected it has been published and then a random number.
This is based on the publication that is doing.
This is usually given by the CBD itself.
Right.
And then these are some of the some of the some of the random comedians that I am showing.
Just to give you an idea about how this index really looks like, OK, so this is all about it.
And this is civilities.
Dot com is not the only platform where you can find DCB information.
There are some more websites like Exploit DBI, which you can find on the Exploit DV dot com and even
on the explorative as well.
You can make use of Google hacking.
Dabis DHT DB.
Where do you get more insight about this is present in the exploded self.
Now why.
What's the difference.
What's different about exploit Beebee.
It just that give you more clarity.
The UI and other stuffs are pretty much more, more simpler.
You get more, more options when you get the Google hacking best options as well.
You get even information about any available exploit as well as civilians.
You get the information about C.V, what devices are impacted and many more with exposed TV.
You even get to know if that KVI has got any exploit available.
Remember this, if there's exploit available, that means that vulnerability is very, very critical.
That means anybody can attack or can possibly make the attack happen if that vulnerability exists.
OK, so let me show you how this really works.
What we can do is exactly let me go to the browser once and you can go to CVT details dot com.
OK, and now here you see, you can filter everything with the help of with the help of EBIT, the product
under the tax such as Cisco.
So I get to see everything related.
This is good, although this is making use of Cisco.
But let me.
Do selecting vendors, if I.
Select the vendor specifically and you will see this is where you can select the vendor name, so Sunset's
Cisco here and you get to see the number of products are three, six, seven, six.
So it could be hardware, software, both and total number of active vulnerabilities or the vulnerability
has been published.
These are four one six seven.
OK, if I select these, you get to see all the vulnerabilities of Cisco and these these are the score
of the one published date.
And this is the type of the one released by a bus.
This is DCB.
Information and authentication required complexity.
None.
Let me go through some of the complex ones.
You see this?
This is the code execution if you open it.
So this is about a 100 in the Web UI of Cisco Firepower five Management System Center, which is an
Next-Generation Firewall of Cisco.
And this is basically to manage FTD, manage the firewalls, multiple firewalls.
So FMC is basically a centralized, centralized dashboard to manage all the files in the Enterprise
Network.
Now, this has a challenge that has a vulnerability there where it can allow an authenticated remote
attacker to inject arbitrary code, arbitrary commands that that are executed with the privileges of
the route user of the underlying operating system.
Right.
That's why it comes under the remote code execution.
And that's what that's the reason the impact is pretty high and that's why it is falling under nothing.
All right.
So even you can search for, let's say, Microsoft and where you would probably find more than that.
Yeah, so so you see six eight one four.
It's pretty similar to Cisco.
And you could see again the when will you find the score more scored more than nine or eight.
It is expected to be a remote code, execution node, buffer overflow and all those stuff.
Right.
You can go to home.
Let me show you what exactly you can look for in a nutshell.
You could see all the vulnerability of the platform, maybe Cisco, Cisco or maybe Microsoft, Adobe,
F5, anything.
Right.
So you can see all the one on one go.
These are all the active vulnerabilities.
And this is where you can find the most critical vulnerabilities at this moment.
And you could probably see dust yourself off.
The exploit are available if it is really can be, you know, exploited, if you can really get into
the system or not, you can probably drive it.
That would need.
Right permission.
OK, so you can see from nine to ten there are sixteen thousand one eighty five vulnerabilities active,
OK?
And these are mostly execution called overflow.
You will also find I remote cause a good execution as well.
These are all the execution related vulnerabilities and these are related to multiple platform.
You could see it.
This is related wheeling and dealing devices.
There would be some more.
This is related to Linera.
That is another platform.
Yeah, because this is what about it.
And if you go to exploit.
Exploit the conflict.
This is another platform where you get more information, but very specific to exploit.
So this is where you get to see the vulnerabilities and majorly the exploit for individual vulnerability.
So if you see on the top, this is where you find the exploited database, basically the database of
entire let's say on the top, you could see a big IP.
I control reste remote code execution exploit is available.
Now, this is about the espalier balancer, which is pretty much popular and has got the largest market
share as well, and the exploit is available.
So if you have anything related to this.
Yeah.
Any vulnerabilities related to this, possibly that has to be the higher score because the exploit is
available.
And again, so you could see it as having a vulnerability as two zero two zero to one to two ninety
six.
So let's see if you want to get information about this KBE.
You can even go to court here and let's say you can search for TV.
Two zero two one two two nine eight six.
There are two one two two nine six three.
Let me search for it, and it is oh, did something wrong?
I cite only one Laettner to the results.
We are not encouraging auditory speech.
Um, I think I think the right one.
But let me again for my CV to zero.
The one.
Due to 986.
Go to ninety six, you mostly find all of them over here, but again, let's go in here and see if we
could find the same number structure.
OK, two zero two one two two nine eight six.
So, see, this is something which wasn't even present on CBDs, and this is how you can be returned
to multiple other sites, and I told you this has had been met and this is being managed by Myntra,
which is the body which manages all the vulnerabilities and databases across the network.
So Nyst sorry, the military is responsible for managing all the database of all the CV numbers as well.
And this you can see CV sponsored by the DHS as one who manages this is this program is all sponsored
by them and they run the entire program itself.
So if you see this vulnerability is something which is present over here and this has this is a game
for big IP, the same records, and you get the information about the same vulnerabilities.
And in fact, you can even find on the FBI the vendor site as well.
So you can probably go to their platform and get to see even five as you get to see more information
about it.
What does this CB is all about?
So I can draw a rest?
I don't think I can remember this five as a load balancer and I control it more for the automation,
for every activity rest API kind of a structure for automation activity itself.
And there's a fix available as well, but there's an exploit available as well.
So this is the reason it is so critical.
And you see the Skouris available this and this is the entire gold which is being available.
And if you have the right involvement, as I said, it's entirely a Python script so anybody can make
use of this code to possibly exploit this vulnerability.
OK, so remember, this might be impacted.
This might this vulnerability might be impacting certain a certain code words in itself when it comes
to the demotes, which is DFI or operating Bushin operating systems.
So you could see it is only certain version of a fire is only impacted.
The version is only Bachtiar, which is sixteen point zero point six and before these dishes are only
impacted.
So if we get to test any load balancer we could meet, we need to first verify if our target system
is is is is having version any one of this.
OK, so then we can possibly possibly start testing it with this Python script to try to try to compromise
the system with this specific exploit code.
All right.
So this is how we can get to know about the one libretti from Civilities and then get the exploit as
well from the explorer, DP, some of these CVS's as you just see if you have you have just so that
some of the CSV information wasn't really available on the CVT did as.
And of course this would be redirected to DCB, MindTree dot org as well.
So these are on the case that where the KVI is very specific and this might be related to the mid-range
site, its official site.
Right.
So I hope you got the idea about how to find the exploit and its corresponding covid information and
going a bit more in play.
Right.
So we'll catch you in the next session where we'll explore some more information.
Thank you.