{"uuid": "e1581d7e-3d7a-4347-80a4-74d0b4f23572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3438", "type": "seen", "source": "https://t.me/cissp/3933", "content": "Blue Team Techniques\n1. Ghidra script to decrypt a string array in XOR DDoS\nhttps://maxkersten.nl/binary-analysis-course/analysis-scripts/ghidra-script-to-decrypt-a-string-array-in-xor-ddos\n2. One-stop TLS traffic inspection and manipulation using dynamic instrumentation\nhttps://blog.syss.com/posts/hallucinate\n\nOffensive security\n1. SSRF in Dependabot\nhttps://blog.tyage.net/posts/2021-06-27-dependabot-rce\n\nMalware analysis\nReverse engineer the malware Cryptowall to replicate the PE injection technique\nhttps://malwareunicorn.org/workshops/peinjection.html#0\n]-> https://github.com/malware-unicorn/GoPEInjection\n\nRed Team Tactics\n1. HTTP Server serving obfuscated Powershell Scripts/Payloads\nhttps://github.com/WazeHell/LightMe\n2. Native payload generation and shellcode injection tool that provides support for common platforms and architectures\nhttps://github.com/EntySec/HatVenom\n\nRoot Cause Analysis of a Printer\u2019s Drivers Vulnerability CVE-2021-3438\nhttps://voidsec.com/root-cause-analysis-of-cve-2021-3438\n\nexploit\nCVE-2021-24155:\nWordPress Backup Guard Authenticated RCE Exploit\nhttps://github.com/0dayNinja/CVE-2021-24155.rb", "creation_timestamp": "2026-09-01T17:00:44.162952Z"}