{"uuid": "c4538401-618e-43a0-af29-445552eaaed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31950", "type": "seen", "source": "https://t.me/cissp/3413", "content": "Blue Team Techniques\n1. Blue Team Detection: DarkSide Ransomware\ud83d\udc40\nhttps://www.secjuice.com/blue-team-detection-darkside-ransomware\n2. Malicious plug-in detection engine for iOS applications\nhttps://github.com/alipay/ios-malicious-bithunter\n3. Hunting for Suspicious Usage of Background Intelligent Transfer Service (BITS)\ud83d\ude01\nhttps://blog.menasec.net/2021/05/hunting-for-suspicious-usage-of.html?m=1\n\nRed Team Tactics\n1. Don't use commands, use code: the tale of Netsh & PortProxy\nhttps://adepts.of0x.cc/netsh-portproxy-code\n2. Tenet provided a very straight-forward deserialization attack to get a foothold and a race-condition attack to get root\nhttps://0xdf.gitlab.io/2021/06/12/htb-tenet.html\n\n\nexploit\nCVE-2021-31950:\nMicrosoft SharePoint Server 16.0.10372.20060 - SSRF (PoC)\nhttps://packetstormsecurity.com/files/163080/mssharepoint16-ssrf.txt\n// MS SharePoint Server suffers from a GetXmlDataFromDataSource SSRF vulnerability", "creation_timestamp": "2026-09-02T01:04:36.008900Z"}