{"uuid": "297e9e1a-e38f-4ad6-8b92-8c3b441873d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-26236", "type": "seen", "source": "https://t.me/cissp/2626", "content": "Attack Surface Analysis\nPart 1 - Application Update: \"A Novel Way to Bypass Executable Signature Checks with Electron\"\nhttps://parsiya.net/blog/2021-01-08-attack-surface-analysis-part-1-application-update-a-novel-way-to-bypass-executable-signature-checks-with-electron\nPart 2 - Custom Protocol Handlers\nhttps://parsiya.net/blog/2021-03-17-attack-surface-analysis-part-2-custom-protocol-handlers\n\nFuzzing: FastStone Image Viewer & CVE-2021-26236\nhttps://voidsec.com/fuzzing-faststone-image-viewer-cve-2021-26236\n\nThreat Research\nThe most common on premises vulnerabilities and misconfigurations\nhttps://s3cur3th1ssh1t.github.io/The-most-common-on-premise-vulnerabilities-and-misconfigurations\n\nRed Team Tactics\n1. PowerShell script designed to create reverse proxies\nhttps://github.com/tokyoneon/Invoke-SocksProxy\n2. How APTs Use Reverse Proxies to Nmap Internal Networks\nhttps://www.varonis.com/blog/nmap-reverse-proxies/?utm_content=158497201&utm_medium=social&utm_source=twitter&hss_channel=tw-21672993", "creation_timestamp": "2026-09-01T17:00:58.427734Z"}