{"uuid": "efaf7ff9-3589-4365-85f7-18c418f2b596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-38295", "type": "seen", "source": "https://t.me/cissp/4621", "content": "Threat Research\n1. DOM XSS on Google com\nhttps://svennergr.github.io/writeups/google/ads_dom_xss1\n2. Abusing Slack\u2019s file-sharing functionality\nto de-anonymise fellow workspace members\nhttps://jub0bs.com/posts/2021-10-12-xsleak-stack\n\nOffensive security\nBypass Facebook SSL Pinning for iOS\nhttps://github.com/phwd/fb-ios-pinning-2021\n\nKernel Fuzzer for Xen Project (KF/x) - Hypervisor-based fuzzing using Xen VM forking, VMI & AFL\nhttps://github.com/intel/kernel-fuzzer-for-xen-project\n\nBlue Team Techniques\n1. Sysmon For Linux\nhttps://github.com/Sysinternals/SysmonForLinux\n]-> Automating the deployment of Sysmon for Linux/Azure Sentinel in a lab environment\nhttps://techcommunity.microsoft.com/t5/azure-sentinel/automating-the-deployment-of-sysmon-for-linux-and-azure-sentinel/ba-p/2847054\n\nSandbox Windows architecture\nhttps://chromium.googlesource.com/chromium/src/+/refs/heads/main/docs/design/sandbox.md\n\nMalware analysis\n1. The Deimos implant\nhttps://www.elastic.co/blog/going-coast-to-coast-climbing-the-pyramid-with-the-deimos-implant\n2. Necro Python Botnet\nGoes After Vulnerable VisualTools DVR\nhttps://blogs.juniper.net/en-us/threat-research/necro-python-botnet-goes-after-vulnerable-visualtools-dvr\n\nexploit\n1. CVE-2021-33766:\nProxyToken - An Authentication Bypass in Microsoft Exchange Server PoC exploit\ud83d\ude01\nhttps://github.com/bhdresh CVE-2021-33766\n\n2. CVE-2021-38295:\nA simple Python PoC\nhttps://github.com/ProfessionallyEvil/CVE-2021-38295-PoC/commits/main\n\n\n\u200e\u200b", "creation_timestamp": "2026-09-02T01:04:22.948667Z"}