{"uuid": "3517fcc9-32ba-4dc8-b8f9-bec87e3faf4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22053", "type": "seen", "source": "https://t.me/cissp/4861", "content": "tools\nRed_Team_Tactics\n1. Lsass NTLM Authentication Backdoor\nhttps://github.com/kindtime/nosferatu\n2. Cobalt Strike Aggressor Script that Performs System/AV/EDR Recon\nhttps://github.com/optiv/Registry-Recon\n\nAnalytics\nAdvanced threat predictions for 2022\ud83d\udc4d\ud83c\udffd\nhttps://securelist.com/advanced-threat-predictions-for-2022/104870\n\nMalware_analysis\nSquirrelwaffle Exploits ProxyShell and ProxyLogon to Hijack Email Chains\nhttps://www.trendmicro.com/en_us/research/21/k/Squirrelwaffle-Exploits-ProxyShell-and-ProxyLogon-to-Hijack-Email-Chains.html\n\nexploit\n1. CVE-2021-42321:\nExchange Post-Auth RCE\nhttps://gist.github.com/testanull/0188c1ae847f37a70fe536123d14f398\n\n2. CVE-2021-22053:\nSpring Cloud Netflix Hystrix Dashboard\ntemplate resolution vulnerability\nhttps://github.com/SecCoder-Security-Lab/spring-cloud-netflix-hystrix-dashboard-cve-2021-22053\n\nOffensive_security\nExploiting OAuth:\nJourney to Account Takeover\nhttps://blog.dixitaditya.com/2021/11/19/account-takeover-chain.html", "creation_timestamp": "2026-09-02T01:04:19.023914Z"}