{"uuid": "52df017f-0f7a-434f-8f71-3fc6425446a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1790", "type": "seen", "source": "https://t.me/cissp/3052", "content": "Threat Research:\n1. Hypervisor Research Notes\nhttps://github.com/farazsth98/hypervisor_research_notes\n2. DRDoS warning: deep analysis of TCP reflection\nhttps://paper.seebug.org/1571\n\nBlue Team Techniques:\n1. A python tool to parse Windows Background Intelligent Transfer Service (BITS) database files\ud83d\ude2c\nhttps://github.com/fireeye/BitsParser\n2. SSH Sniffing (SSH Spying) Methods and Defense\ud83d\ude03\nhttps://www.infosecmatter.com/ssh-sniffing-ssh-spying-methods-and-defense\n\nTapJacking Attacks, a thorough guide:\nPart 1:  https://valsamaras.medium.com/tapjacking-attacks-a-thorough-guide-2cd6486d0fc9\nPart 2:  https://valsamaras.medium.com/tapjacking-attacks-a-thorough-guide-part-2-3b0390602a81\nPart 3:  https://valsamaras.medium.com/tapjacking-attacks-a-thorough-guide-last-part-3-f19614314b7\n\nexploit\nmacOS/iOS FontParser Exploits\nCVE-2021-1758:\nmacOS 10.15 /iOS CoreText Out-Of-Bounds Read (PoC)\nhttps://starlabs.sg/advisories/21-1758\n\nCVE-2021-1790:\nmacOS 10.15/iOS CoreText libhvf Out-Of-Bounds Read (PoC)\nhttps://starlabs.sg/advisories/21-1790\n\nAdvanced IRC bot/botnet PoC\nhttps://github.com/trackmastersteve/HackServ\n\nRed Team Tactics:\n1. XXE\n// Exploiting XXE to perform SSRF attacks, Blind XXE vulnerabilities, XInclude attacks, XXE attacks via file upload\nhttps://newrouge.medium.com/xxe-from-zero-to-hero-b38118750556\n2. Hacking GraphQL\nPart 1:  https://infosecwriteups.com/hacking-graphql-for-fun-and-profit-part-1-understanding-graphql-basics-72bb3dd22efa\nPart 2:  https://infosecwriteups.com/hacking-graphql-for-fun-and-profit-part-2-methodology-and-examples-5992093bcc24", "creation_timestamp": "2026-09-02T01:04:42.396596Z"}