{"uuid": "42eeab08-078d-48f2-a893-7e0b995d65c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38666", "type": "seen", "source": "https://t.me/cissp/4799", "content": "Blue_Team_Techniques\nSecurity Policy Templates\nhttps://www.sans.org/information-security-policy/?per-page=100\n\nThreat_Research\n1. Evading EDR Detection with Reentrancy Abuse\nhttps://www.deepinstinct.com/blog/evading-antivirus-detection-with-inline-hooks\n2. BotenaGo Botnet\nhttps://cybersecurity.att.com/blogs/labs-research/att-alien-labs-finds-new-golang-malwarebotenago-targeting-millions-of-routers-and-iot-devices-with-more-than-30-exploits\n\nexploit\n1. CVE-2021-37999:\nGoogle Chrome NTP XSS via Google Search CSRF\nhttps://bugs.chromium.org/p/chromium/issues/detail?id=1251541\n\n2. CVE-2021-38666:\nRemote Desktop Client RCE Vulnerability\nhttps://github.com/DarkSprings/CVE-2021-38666-poc\n\nRed_Team_Tactics\n1. Becoming A Super Admin In Someone Elses Gsuite Organization And Taking It Over\nhttps://secreltyhiddenwriteups.blogspot.com/2021/11/becoming-super-admin-in-someone-elses.html\n2. Dumping LSASS has never been so stealthy...\nhttps://github.com/helpsystems/nanodump", "creation_timestamp": "2026-09-02T01:04:19.940784Z"}