{"uuid": "d8e7f097-49dc-40bf-b18c-c6ddd54d9775", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-34866", "type": "seen", "source": "https://t.me/cissp/4733", "content": "Malware_analysis\n1. Malicious code analysis:\nAbusing SAST (mis)configurations to hack CI systems\nhttps://medium.com/cider-sec/malicious-code-analysis-abusing-sast-mis-configurations-to-hack-ci-systems-13d5c1b37ffe\n2. Mekotio Banker Trojan\nhttps://research.checkpoint.com/2021/mekotio-banker-returns-with-improved-stealth-and-ancient-encryption\n\nOffensive_security\n1. aDLL - Adventure of Dinamic Lynk Library\nhttps://github.com/ideaslocas/aDLL\n// aDLL is a binary analysis tool focused on the automatic discovery of DLL Hijacking vulnerabilities\n\n2. Cobalt Strike:\nUsing Process Memory To Decrypt Traffic - Part 3\nhttps://blog.nviso.eu/2021/11/03/cobalt-strike-using-process-memory-to-decrypt-traffic-part-3\n]-> Part 1, 2:\nhttps://t.me/cybersecuritytechnologies/4576\n\nRed_Team_Tactics\n1. Chrome Exploitation:\nAn old but good case-study\nhttps://blog.haboob.sa/blog/chrome-exploitation-an-old-but-good-case-study\n2. DCOM abuse and lateral movement with Cobalt Strike\nhttps://www.pentestpartners.com/security-blog/dcom-abuse-and-lateral-movement-with-cobalt-strike\n\nexploit\nCVE-2021-34886:\nType confusion lead to EoP\nhttps://github.com/HexRabbit/CVE-writeup/tree/master/CVE-2021-34886\n]-> https://blog.hexrabbit.io/2021/11/03/CVE-2021-34866-writeup", "creation_timestamp": "2026-09-01T17:00:36.507870Z"}