Forensia CTI Core

About

Adversaries may abuse legitimate extensible development features of servers to establish persistent access to systems. Enterprise server applications may include features that allow developers to write and install software or scripts to extend the functionality of the main application. Adversaries may install malicious components to extend and abuse server applications.

Platforms: Windows, Linux, macOS, Network Devices, ESXiMITRE ATT&CK ↗

Used by actors

0 known groups

No mapped actors.

Software

0 malware/tools implement this

None mapped.

Corpus indicators tagged with this technique

90 indicators in the corpus carry T1505.

Indicator	Type	Family	Sev	Src
cve-2025-11837	cve	—	85	2
cve-2022-47945	cve	—	85	1
cve-2016-5681	cve	—	85	2
cve-2013-3307	cve	—	85	2
44805c4b36bd3d97ba8ecaf6fe103572	hash	—	80	2
7f2b2e3516fa454adfd51f857ae80adf	hash	—	80	2
8deb2a60d42de0f8f8786e485d2f046f	hash	—	80	2
0ffb4b4e430f4b69216fb9d2e082e482	hash	—	80	2
0a2d2a4ec1ca2aa6a23a35abb5a75451	hash	—	80	2
0627f034c42549e2130734b5f8dbf854	hash	—	80	2
16fed5909de4f50351fc33fbfcf156df	hash	—	80	2
9221423d7daff9e64f7e2af54f911fea	hash	—	80	2
4c80d17fa5db5b1c2aaddb5351e9cb6b	hash	—	80	2
5d9cdb072415b191df3f444f53b2ff4b	hash	—	80	2
dc35086ba0f5f83545c32a023a1f3be4	hash	—	80	2
a3e3197e2344c51e95c063541ea22205	hash	—	80	2
7461445fca3f9d8911148e0908d33c3b	hash	—	80	2
ea2fe3b409da439aec25cf7eabf5b7a7	hash	—	80	2
10ba24db187836efe77ed7e75d279d33	hash	—	80	2
fffcbd0ac2cb545496890f50395181ff	hash	—	80	2
19232d0eff3ef7aee3b5d7620c72358c	hash	—	80	2
05627d1bddb7292bb45139244f46051f	hash	—	80	2
36ff9f683e870145aaf5a715bc934762	hash	—	80	2
7b361a6d0d42309d09ec9000b53712b3	hash	—	80	2
6869f24aecd75e2144aba8dc03dc2d0f	hash	—	80	2
18f894a3168ee0b809eed321a2e748b4	hash	—	80	2
6f761f63642cd6329a29cfad80be50c3	hash	—	80	2
8cc249b16adf7e4a658af7fa31d7998e	hash	—	80	2
6f91d1f8f0cbaab137351936b52f7a94	hash	—	80	2
8edb3ea62a7e643ba1a88d20799cf94f	hash	—	80	2

Showing the top 30 by severity of 90.