{"uuid": "4e406a90-6276-48bc-86a4-b06e25ff179b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28663", "type": "seen", "source": "https://t.me/cissp/4236", "content": "Red Team Tactics\n\"Unoriginal-Rice-Patty\" - Replay-based attack on Honda/Acura vehicles\ud83d\ude00\nhttps://github.com/hackingintoyourheart/unoriginal-rice-patty\n\nBlue Team Techniques\n1. Getting the maximum of your C compiler, for security\nhttps://airbus-seclab.github.io/c-compiler-security\n2. Cobalt Strike Beacon configuration extractor and parser\nhttps://github.com/strozfriedberg/cobaltstrike-config-extractor\n\nOffensive security\n1. Deception in Depth - LSASS Injection\nhttps://blog.spookysec.net/DnD-LSASS-Injection\n2. CVE-2021-28663:\nAndroid kernel backdoor vulnerability\nhttps://paper.seebug.org/1690\n// This vulnerability in the ARM Mali GPU driver can help an attacker:\n- steal other APP running memory data;\n- modify other APP code;\n- steal kernel running memory data;\n- stably obtain ROOT permission...\n\nMalware analysis\nPhishing via Open Redirects\ud83e\udd78\nhttps://www.microsoft.com/security/blog/2021/08/26/widespread-credential-phishing-campaign-abuses-open-redirector-links\n\nThreat Research\n1. Exploiting GraphQL\nhttps://blog.assetnote.io/2021/08/29/exploiting-graphql\n]-> GraphQL security auditing \ud83d\udc4d\ud83c\udffdscript:\nhttps://github.com/assetnote/batchql\n2. Operation (Th\u1ee7y Tinh) OceanStorm\nhttps://mp.weixin.qq.com/s/dGW0FrbZZ5UA6KuuZB8J_g", "creation_timestamp": "2026-09-01T17:00:41.894327Z"}