{"uuid": "8fae0725-1321-40d8-af7e-f8a0b806316b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36168", "type": "seen", "source": "https://t.me/cissp/4024", "content": "Red Team Tactics\nAbusing NTLM Relay and Pass-The-Hash for Admin\nhttps://infosecwriteups.com/abusing-ntlm-relay-and-pass-the-hash-for-admin-d24d0f12bea0\n\nexploit\nCSRF on /api/graphql allows executing mutations through GET requests\nhttps://hackerone.com/reports/1122408\n\nOffensive security\nMy Steps of Reproducing\u00a0ProxyShell\nhttps://y4y.space/2021/08/12/my-steps-of-reproducing-proxyshell\n\nThreat Research\n1. Fortinet FortiPortal Vulnerability Disclosures (CVE-2021-32588, CVE-2021-36168)\nhttps://insomniasec.com/blog/fortiportal-disclosures\n2. Modify in-flight data to payment provider Smart2Pay\nhttps://hackerone.com/reports/1295844", "creation_timestamp": "2026-09-01T17:00:42.934689Z"}