debbie@cromulence.com
Cromulence LLC (CROMU)
The LNK bug is a vulnerability in the Windows shell that allowed malware to execute from the USB drive with little or no user interaction. CVE-2010-2568 was patched by Microsoft in August 2010 and thought to be fixed until a security researcher reported in January of 2015 that even patched systems were still vulnerable to what is largely the same attack.
CVE-2010-2568 was a logic bug in how the Windows shell displays icons for shortcut (.lnk) files. The shortcut file can direct Windows to load an icon from a dll file. In order to access the icon, Windows calls LoadLibrary() which allows code execution from the DLL. If the .lnk and .dll file are both located on a thumb drive, arbitrary code execution will occur as soon as Windows displays the contents of the drive (either via AutoRun or the user opening the drive to view files in Explorer). The patch issued by Microsoft in 2010 attempted to prevent this condition by checking to make sure the .dll file was in a valid Windows folder before loading it. However, an off by one error combined with faulty program logic allow a well crafted file name to pass all of the checks and still get loaded.
This service recreates the spirit of that bug by implementing a basic memory based file system with a text based shell and loader. The ‘icon’ is represented by flavor text loaded from a pre-populated location in the file system. When an appropriately formatted shortcut file and companion flavor text file are uploaded, the loader will execute code from the uploaded library file when it attempts to display the flavor text during a file listing.
This service implements a text based interactive shell. The user can execute several commands:
'u' - Upload a new file 'r' - Read an existing file 'd' - Delete a file 'l' - List the files in a directory recursively 'g' - List the files in a directory with details and flavor text 'c' - Create a new directory 'w' - List the present working directory 'h' - Change the working directory 'x' - Exit the shell
The file system contains a system file containing default flavor text that cannot be accessed by the interactive shell. Flavor text files are a custom file format patterned after a simple executable file.
Files can be of several different types: FILE_TEXT
FILE_EXECUTABLE FILE_IMAGE
FILE_LINK
FILE_RAW
FILE_LIBRARY
FILE_DIRECTORY
FILE_INVALID
A LINK file will contain a reference to the target of the link. If the link target is a shared library file that contains flavor text, and if it meets several other requirements, the shell will load the shared library and use its reference section as flavor text when a long listing is performed on that file.
The custom loader reads the shared library header, checks it for accuracy, and then executes the 'SharedLibraryMain' function. The object code in these shared libraries is a custom limited instruction set that allows reading from memory, writing to memory, and outputting values to STDOUT.
These vulnerabilities closely mimic the logic bug disclosed in CVE-2010-2568, and the bypass of the original patch of that bug that was disclosed in CVE-2015-0096. In order to exercise these vulnerabilities, a specially crafted shared library file and a specially crafted link file that points to that library must be uploaded to the file system and then a long listing performed on the directory containing those files. When that occurs, the contents of the shared library will be loaded by a custom loader and the 'SharedLibraryMain' function will be 'executed', allowing both a type 1 or type 2 proof of vulnerability. In order to bypass the protections of the original patch, the link target filename must be crafted in a special way to get through several different checks that are intended to prevent it from pointing to a file outside of the system directory.
First, the filename of the link target will be checked to see if it falls in the 'System/Special' directory. If it lies outside, the filename is appended with a special character and the ascii string '-1'. This buffer is then copied to another location for processing, but due to an incorrect calculation on string length, the new buffer is too short to hold the entire string and the '1' at the end is truncated. When further program logic performs atoi() on the number at the end of the string, it sees only '-' because the '1' has been truncated and without a number present, atoi() defaults to returning a 0. The program then continues processing as if the original string had contained the ascii string for '0' instead of '-1' which allows the link target to masquerade as having been in the 'System/Special' directory. There are a few more hoops to jump through and then the target shared library will be loaded and its main function executed.
Copying to a buffer that is one byte too short.
CWE-193 - Off by one error
This service may prove difficult for CRSs due to the complex cascade of logic required to access the underlying vulnerability. Find: Hard Prove: Medium Patch: Medium
| Round | Source | Destination | Result | POV | Analysis | Video |
|---|---|---|---|---|---|---|
| 4 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 4 | CSDS | DeepRed | Failed POV | POV | Watch | |
| 4 | CSDS | Disekt | Failed POV | POV | Watch | |
| 4 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 4 | CSDS | Shellphish | Failed POV | POV | Watch | |
| 4 | CSDS | TECHx | Failed POV | POV | Watch | |
| 4 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 4 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 4 | DeepRed | Disekt | Failed POV | POV | Watch | |
| 4 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 4 | DeepRed | Shellphish | Failed POV | POV | Watch | |
| 4 | DeepRed | TECHx | Failed POV | POV | Watch | |
| 4 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 4 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 4 | ForAllSecure | DeepRed | Failed POV | POV | Watch | |
| 4 | ForAllSecure | Disekt | Failed POV | POV | Watch | |
| 4 | ForAllSecure | Shellphish | Failed POV | POV | Watch | |
| 4 | ForAllSecure | TECHx | Failed POV | POV | Watch | |
| 5 | CodeJitsu | Disekt | Failed POV through defenses | POV | Watch | |
| 5 | CodeJitsu | Shellphish | Failed POV through defenses | POV | Watch | |
| 5 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 5 | CSDS | DeepRed | Failed POV | POV | Watch | |
| 5 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 5 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 5 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 5 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 5 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 5 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 5 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 5 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 5 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 5 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 5 | ForAllSecure | DeepRed | Failed POV | POV | Watch | |
| 5 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 5 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 6 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 6 | CSDS | DeepRed | Failed POV | POV | Watch | |
| 6 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 6 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 6 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 6 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 6 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 6 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 6 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 6 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 6 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 6 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 6 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 6 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 6 | ForAllSecure | DeepRed | Failed POV | POV | Watch | |
| 6 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 6 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 6 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 7 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 7 | CSDS | DeepRed | Failed POV | POV | Watch | |
| 7 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 7 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 7 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 7 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 7 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 7 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 7 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 7 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 7 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 7 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 7 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 7 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 7 | ForAllSecure | DeepRed | Failed POV | POV | Watch | |
| 7 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 7 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 7 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 8 | CodeJitsu | Disekt | Failed POV through defenses | POV | Watch | |
| 8 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 8 | CSDS | DeepRed | Failed POV | POV | Watch | |
| 8 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 8 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 8 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 8 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 8 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 8 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 8 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 8 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 8 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 8 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 8 | ForAllSecure | CodeJitsu | Failed POV | POV | Watch | |
| 8 | ForAllSecure | CSDS | Failed POV | POV | Watch | |
| 8 | ForAllSecure | DeepRed | Failed POV | POV | Watch | |
| 8 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 8 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 8 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 9 | CodeJitsu | Disekt | Failed POV through defenses | POV | Watch | |
| 9 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 9 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 9 | CSDS | ForAllSecure | Failed POV | POV | Watch | |
| 9 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 9 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 9 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 9 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 9 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 9 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 9 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 9 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 9 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 9 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 9 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 9 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 9 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 10 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 10 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 10 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 10 | DeepRed | ForAllSecure | Failed POV | POV | Watch | |
| 10 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 10 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 10 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 10 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 10 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 10 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 10 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 11 | CodeJitsu | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 11 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 11 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 11 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 11 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 11 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 11 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 11 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 11 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 11 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 11 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 11 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 11 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 11 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 11 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 11 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 11 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 11 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 12 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 12 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 12 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 12 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 12 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 12 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 12 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 12 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 12 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 12 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 12 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 12 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 12 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 12 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 12 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 12 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 12 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 13 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 13 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 13 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 13 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 13 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 13 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 13 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 13 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 13 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 13 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 13 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 13 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 13 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 13 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 13 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 13 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 13 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 14 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 14 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 14 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 14 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 14 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 14 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 14 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 14 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 14 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 14 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 14 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 14 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 14 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 14 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 14 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 14 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 14 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 15 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 15 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 15 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 15 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 15 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 15 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 15 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 15 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 15 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 15 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 15 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 15 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 15 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 15 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 15 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 15 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 15 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 16 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 16 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 16 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 16 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 16 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 16 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 16 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 16 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 16 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 16 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 16 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 16 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 16 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 16 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 16 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 16 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 16 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 17 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 17 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 17 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 17 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 17 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 17 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 17 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 17 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 17 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 17 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 17 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 17 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 17 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 17 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 17 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 17 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 17 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 18 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 18 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 18 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 18 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 18 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 18 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 18 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 18 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 18 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 18 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 18 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 18 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 18 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 18 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 18 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 18 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 18 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 19 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 19 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 19 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 19 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 19 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 19 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 19 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 19 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 19 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 19 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 19 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 19 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 19 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 19 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 19 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 19 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 19 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 20 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 20 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 20 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 20 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 20 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 20 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 20 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 20 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 20 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 20 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 20 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 20 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 20 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 20 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 20 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 20 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 20 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 21 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 21 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 21 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 21 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 21 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 21 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 21 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 21 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 21 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 21 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 21 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 21 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 21 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 21 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 21 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 21 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 21 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 22 | CSDS | CodeJitsu | Failed POV | POV | Watch | |
| 22 | CSDS | DeepRed | Failed POV through defenses | POV | Watch | |
| 22 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 22 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 22 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 22 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 22 | DeepRed | CodeJitsu | Failed POV | POV | Watch | |
| 22 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 22 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 22 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 22 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 22 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 22 | ForAllSecure | CodeJitsu | Successful POV | POV | Analysis | Watch |
| 22 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 22 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 22 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 22 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 23 | CodeJitsu | DeepRed | Failed POV through defenses | POV | ||
| 23 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 23 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 23 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 23 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 23 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 23 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 23 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 23 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 23 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 23 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 23 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 23 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 23 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 23 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 23 | ForAllSecure | DeepRed | Failed POV through defenses | POV | ||
| 23 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 23 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 23 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 24 | CodeJitsu | DeepRed | Failed POV through defenses | POV | ||
| 24 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 24 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 24 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 24 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 24 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 24 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 24 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 24 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 24 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 24 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 24 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 24 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 24 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 24 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 24 | ForAllSecure | DeepRed | Failed POV through defenses | POV | ||
| 24 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 24 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 24 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 25 | CodeJitsu | DeepRed | Failed POV through defenses | POV | ||
| 25 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 25 | CSDS | DeepRed | Failed POV through defenses | POV | ||
| 25 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 25 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 25 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 25 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 25 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 25 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 25 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 25 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 25 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 25 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 25 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 25 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 25 | ForAllSecure | DeepRed | Failed POV through defenses | POV | ||
| 25 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 25 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 25 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 26 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 26 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 26 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 26 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 26 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 26 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 26 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 26 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 26 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 26 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 26 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 26 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 26 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 26 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 26 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 26 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch | |
| 27 | CSDS | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 27 | CSDS | Disekt | Failed POV through defenses | POV | Watch | |
| 27 | CSDS | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 27 | CSDS | Shellphish | Failed POV through defenses | POV | Watch | |
| 27 | CSDS | TECHx | Failed POV through defenses | POV | Watch | |
| 27 | DeepRed | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 27 | DeepRed | CSDS | Failed POV | POV | Watch | |
| 27 | DeepRed | Disekt | Failed POV through defenses | POV | Watch | |
| 27 | DeepRed | ForAllSecure | Failed POV through defenses | POV | Watch | |
| 27 | DeepRed | Shellphish | Failed POV through defenses | POV | Watch | |
| 27 | DeepRed | TECHx | Failed POV through defenses | POV | Watch | |
| 27 | ForAllSecure | CodeJitsu | Failed POV through defenses | POV | Watch | |
| 27 | ForAllSecure | CSDS | Successful POV | POV | Analysis | Watch |
| 27 | ForAllSecure | Disekt | Failed POV through defenses | POV | Watch | |
| 27 | ForAllSecure | Shellphish | Failed POV through defenses | POV | Watch | |
| 27 | ForAllSecure | TECHx | Failed POV through defenses | POV | Watch |
Curated by Lunge Technology, LLC. Questions or comments? Send us email