Matching RNoH

URI: MP-RNoH

Package: NetworkConnectivity

< prev | next >

Description: Finds an open network path not via the Internet to a remote attacker subnet from (but not via) a Host connected to a local subnet, and the associated network interface and access context, plus the location contexts for the host being on that subnet, and optionally the host manager.

Root Pattern: R-RNoH

R-RNoH

Finds an open network path to a remote attacker subnet from a Host connected to a local subnet, and the associated network interface and access context.

Threat Patterns (1)

H.M.RNoH.7

Remote root access from AttackerSubnet via LogicalSubnet to back door on device Host: an attacker with access to AttackerSubnet gains access to host Host via a previously installed back door providing a reverse shell via LogicalSubnet .