{"uuid": "9d21f872-b012-46c7-95fc-5dd92c89b0a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2992", "type": "published-proof-of-concept", "source": "https://t.me/onelab1337/2381", "content": "#Threat_Research\n1. Using Threat Emulation for Threat Hunting\n\ud83d\udd17 See on Medium\n\n2. Persistent PHP payloads in PNGs: How to Inject PHP code in an image - and keep it there\n\ud83d\udd17 See on Synacktiv\n\n#tools\n#Red_Team_Tactics\nShadowSpray - tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects\n\ud83d\udd17 See on Github\n\n#tools\n#Blue_Team_Techniques\n1. LMD - Linux Malware Detection\n\ud83d\udd17 See on Github\n\n2. Aftermath - free macOS IR framework\n\ud83d\udd17 See on Github\n\n#exploit\nCVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\n\ud83d\udd17 See on Github\n\n\u2764\ufe0f| Gostou do conte\u00fado? Nos fa\u00e7a uma doa\u00e7\u00e3o!\n\nShare and Supporte us ~ @zero0lab \u2764\ufe0f", "creation_timestamp": "2026-08-10T00:00:29.467130Z"}