{"uuid": "8a4ce8ac-f956-4cb8-977b-31dc043ce6ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30902", "type": "seen", "source": "https://t.me/cissp/4727", "content": "Offensive_security\n1. Introduction to Parent-Child Process Evasion\nhttps://mrd0x.com/introduction-to-parent-child-process-evasion\n2. Nim implementation of Process Hollowing using syscalls (PoC)\nhttps://github.com/snovvcrash/NimHollow\n\nThreat_Research\n1  Use-After-Free in Voice Control:\nCVE-2021-30902 Write-up (iOS13/macOS Catalina)\nhttps://blog.zecops.com/research/use-after-free-in-voice-control-cve-2021-30902\n2. From Zero to Domain Admin\ud83e\uddd0\nhttps://thedfirreport.com/2021/11/01/from-zero-to-domain-admin\n\nMalware_analysis\nDECAF Ransomware (Go)\ud83d\ude05\nhttps://blog.morphisec.com/decaf-ransomware-a-new-golang-threat-makes-its-appearance\n\nBlue_Team_Techniques\n1. MalAPI: maps Windows APIs to common techniques used by malware\ud83e\udd13\nhttps://malapi.io\n2. How the SolarWinds Hack (almost) went Undetected\ud83d\ude0e\nhttps://www.netresec.com/?page=Blog&month=2021-10&post=How-the-SolarWinds-Hack-almost-went-Undetected\n\nOffensive\nA tool for checking if MFA is enabled on multiple Microsoft Services:\ud83d\ude0e\n- MS Graph API\n- Azure Service Management API\n- MS 365 Exchange Web Services\n- MS 365 Web Portal\n- MS 365 Web Portal Using a Mobile User Agent\n- MS 365 Active Sync\n- ADFS\nhttps://github.com/dafthack/MFASweep", "creation_timestamp": "2026-09-01T17:00:36.577118Z"}