{"uuid": "d93d3300-4f6b-4e4f-bdd5-cc5e74b4cbdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30528", "type": "seen", "source": "https://t.me/cissp/4564", "content": "Red Team Tactics\n1. Escaping to Java to escape the Chrome sandbox\n(PoC for CVE-2021-30528)\nhttps://securitylab.github.com/research/chrome_sbx_java\n2. Abusing Weak ACL on Certificate Templates\nhttps://github.com/daem0nc0re/Abusing_Weak_ACL_on_Certificate_Templates\n]-> Python implementation for AD certificate abuse:\nhttps://github.com/ollypwn/Certipy\n\nUnofficial Common Log File System (CLFS) Documentation\nhttps://github.com/ionescu007/clfs-docs\n\nThreat Research\n1. Analysis of Virtualization-based Obfuscation\nhttps://github.com/mrphrazer/r2con2021_deobfuscation\n2. Secure implementation of WebView in iOS applications\nhttps://www.securing.pl/en/secure-implementation-of-webview-in-ios-applications\n\nBlue Team Techniques\nA PoC tool for analyzing a rogue DNS server\ud83d\udc4d\ud83c\udffd\nhttps://github.com/ninoseki/rogue_one\n\n\nOffensive security\n1. Backdoor .NET assemblies with\u2026 dnSpy\nhttps://rastamouse.me/backdoor-net-assemblies-with-dnspy-%f0%9f%a4%94\n2. Python3 tool to perform password spraying using RDP\ud83d\ude3c\nhttps://github.com/xFreed0m/RDPassSpray\n\n\n\u200e\u200b", "creation_timestamp": "2026-09-02T01:04:23.417853Z"}