{"uuid": "90cb787c-8e16-4057-845a-21f67eb41221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-10086", "type": "seen", "source": "https://t.me/cissp/4477", "content": "Blue Team Techniques\nDongTai - interactive application security testing (IAST) product that supports the detection of OWASP WEB TOP-10 vulnerabilities, multi-request related vulnerabilities (including logic vulnerabilities, unauthorized access vulnerabilities, etc.), third-party component vulnerabilities\nhttps://github.com/HXSecurity/DongTai\n\nexploit\n1. CVE-2021-39246:\nTor Browser through 10.5.6, 11.x through 11.0a4 allows a correlation attack excessive verbose logging - Windows, macOS, Linux\nhttps://sick.codes/sick-2021-111\n2. CVE-2020-10086:\nGitLab 10.4 - 12.8.1 - Directory Traversal\nhttps://github.com/Mochican/CVE-2021-10086\n\nOffensive security\n1. NTLM Relaying via Cobalt Strike\nhttps://rastamouse.me/ntlm-relaying-via-cobalt-strike\n2. EXOCET - AV-evading, undetectable, payload delivery tool\nhttps://github.com/tanc7/EXOCET-AV-Evasion\n\nThreat Research\nAutodiscover Attacks\nhttps://www.guardicore.com/labs/autodiscovering-the-great-leak\n]-> https://autodiscover-vulnerable-tlds.com\n\nMalware analysis\n1. Examining the Cring Ransomware Techniques\nhttps://www.trendmicro.com/en_us/research/21/i/examining-the-cring-ransomware-techniques.html\n2. Strings Analysis:\nVBA & Excel4 Maldoc\nhttps://isc.sans.edu/diary/27872\n\n\n\u200e\u200b", "creation_timestamp": "2026-09-01T17:00:39.444505Z"}