{"uuid": "539d7d83-d3d0-4be3-910f-0904ba7f6af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28474", "type": "seen", "source": "https://t.me/cissp/3694", "content": "Red Team Tactics\n1. Open-Source PE Packer\nhttps://iwantmore.pizza/posts/PEzor4.html\n]-> https://github.com/phra/PEzor\n2. XNU IPC - Mach messages\nhttps://dmcyk.xyz/post/xnu_ipc_i_mach_messages\n3. Avoiding Fork&Run .NET Execution With InlineExecute-Assembly\nhttps://securityintelligence.com/posts/net-execution-inlineexecute-assembly\n]-> Beacon Object File PoC:\nhttps://github.com/xforcered/InlineExecute-Assembly\n\nBlue Team Techniques\nAPI Security Need to Know:\nTop 5 Authentication Pitfalls\nhttps://www.cequence.ai/blog/api-security-need-to-know-top-5-authentication-pitfalls\n\nThreat Research\nCVE-2021-28474:\nSharePoint RCE via Server-Side Control Interpretation Conflict\nhttps://www.zerodayinitiative.com/blog/2021/7/7/cve-2021-28474-sharepoint-remote-code-execution-via-server-side-control-interpretation-conflict\n\nCloud Security\nREST API Fuzz Testing (RAFT):\nSource code for self-hosted service developed for Azure, including the API, orchestration engine, and default set of security tools (including MSR's RESTler), that enables developers to embed security tooling into their CI/CD workflows\nhttps://github.com/microsoft/rest-api-fuzz-testing", "creation_timestamp": "2026-09-02T01:04:33.651998Z"}