{"uuid": "ae1254bc-1e12-4cbf-b09a-13d28c5848ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14343", "type": "seen", "source": "https://t.me/cissp/4426", "content": "Graphql Exploitation\nPart 1- Understanding Graphql & Enumeration of Graphql Schema\nhttps://payatu.com/blog/manmeet/graphql-exploitation-part-1\nPart 2- Unauthorized Execution of Queries\nhttps://payatu.com/blog/manmeet/graphql-exploitation-part-2\nPart 3- Injection attacks and XSS attacks\nhttps://payatu.com/blog/manmeet/graphql-exploitation-part-3\nPart 4- Resource Exhaustion (DOS)\nhttps://payatu.com/blog/manmeet/graphql-exploitation-part-4\n\nOffensive security\n1. Template-Driven AV/EDR Evasion Framework\nhttps://github.com/klezVirus/inceptor#installation\n2. A script that monitors and extracts requested URLs/clients connected to the service by exploiting publicly accessible Apache server-status instances\ud83d\ude01\nhttps://github.com/mazen160/server-status_PWN\n\nexploit\nExperimenting with the CVE-2020-14343 PyYAML vulnerability\nhttps://github.com/raul23/pyyaml-CVE-2020-14343\n\nRed Team Tactics\nRed Team Attack Lab for TTP testing & research\ud83d\udc4d\ud83c\udffd\nhttps://github.com/Marshall-Hallenbeck/red_team_attack_lab", "creation_timestamp": "2026-09-01T17:00:40.310840Z"}