{"uuid": "49a003d1-5a85-4e23-a118-d6d88320e8eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31221", "type": "seen", "source": "https://t.me/cissp/3083", "content": "Red Team Tactics:\n1. Evasive shellcode loader for bypassing event-based injection detection (PoC)\nhttps://github.com/xinbailu/DripLoader\n2. Dashboard for conducting Backdoors\nand Breaches sessions over Zoom\nhttps://github.com/p3hndrx/B-B-Shuffle\n\nThreat Research:\nIndicator of Compromise Scanner for CVE-2021-31221\nhttps://github.com/f1reeye/ioc-scanner-CVE-2021-31221\n// Features:\n- application log entries indicating successful exploitation\n- file system paths\u00a0of known dropped files\n- post-exploitation activity in\u00a0shell history\n- unexpected\u00a0crontab entries/scheduled tasks\n- ports\u00a0used by known malware\n\nPHP Composer Vulnerability\nhttps://blog.sonarsource.com/php-supply-chain-attack-on-composer", "creation_timestamp": "2026-09-01T17:00:52.438168Z"}