{"uuid": "33df83e1-34d0-4afb-945d-add65565f6cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29922", "type": "seen", "source": "https://t.me/cissp/3997", "content": "A FREE comprehensive reverse engineering course covering x86, x64, 32-bit ARM & 64-bit ARM architectures\nhttps://github.com/mytechnotalent/Reverse-Engineering\u270c\ud83c\udffc\n\nThreat Research\nA New Attack Surface on MS Exchange\nPart 1 - ProxyLogon!\ud83e\udd13\nhttps://blog.orange.tw/2021/08/proxylogon-a-new-attack-surface-on-ms-exchange-part-1.html?m=1\nPart 2 - ProxyOracle!\nhttps://blog.orange.tw/2021/08/proxyoracle-a-new-attack-surface-on-ms-exchange-part-2.html?m=1\n\nexploit\nCVE-2021-29922:\nRust standard library \"net\" - Improper Input Validation of octal literals in rust 1.52.0 std::net and below results in indeterminate SSRF/RFI vulnerabilities (PoC)\nhttps://sick.codes/sick-2021-015\n\nRed Team Tactics\n1. Tool for patching authenticode signed PE files\n(exe, dll, sys ..etc)\nhttps://github.com/med0x2e/SigFlip\n2. A tool to play with Outlook\nhttps://github.com/eksperience/KnockOutlook\n3. Evading Detection: A Beginner's Guide to Obfuscation\nhttps://github.com/BC-SECURITY/Beginners-Guide-to-Obfuscation\n\nOffensive security\nEyeWitnessTheFitness\nhttps://github.com/knavesec/EyeWitnessTheFitness\n// FireProx AWS API / HTTP Proxy", "creation_timestamp": "2026-09-01T17:00:43.189364Z"}