{"uuid": "b83f87fc-3c22-4160-ab5e-1f2fde70d314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42342", "type": "seen", "source": "https://t.me/cissp/4660", "content": "Offensive WMI:\nPart 4 - Reconnaissance & Enumeration\nhttps://0xinfection.github.io/posts/wmi-recon-enum\nPart 5 - Active Directory Enumeration\nhttps://0xinfection.github.io/posts/wmi-ad-enum \n\nRed Team Tactics\n1. LethalHTA - A new lateral movement technique using DCOM and HTA\nhttps://codewhitesec.blogspot.com/2018/07/lethalhta.html\n2. Elevation of privileges via Resource Based Constrained Delegation\u00a0\nhttps://pentestlab.blog/2021/10/18/resource-based-constrained-delegation\n\nMalware analysis\n1. A step-by-step analysis of the new malware used by APT28/Sofacy called SkinnyBoy\nhttps://cybergeeks.tech/skinnyboy-apt28\n2. BlackByte Ransomware\nhttps://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/blackbyte-ransomware-pt-1-in-depth-analysis\n]-> BlackByte Decryptor:\nhttps://github.com/SpiderLabs/BlackByteDecryptor\n\nexploit\nCVE-2021-42342:\nGoahead webserver (<5.1.5) RCE\nhttps://github.com/kimusan/goahead-webserver-pre-5.1.5-RCE-PoC-CVE-2021-42342-\n\nOffensive security\n1. Heap debugger for tracking glibc heap operations in ELF64 (x86_64) binaries\nhttps://github.com/Arinerron/heaptrace\n2. Hash collisions and their exploitations\nhttps://github.com/corkami/collisions\n\nBlue Team Techniques\nWeb-based tool for the automation of infosec watching\nand vulnerability management with a web interface\nhttps://github.com/Guezone/SECMON\n\nKernel Exploitation on Apple's M1 Chip\n\n\n\u200e", "creation_timestamp": "2026-09-01T17:00:37.825754Z"}