{"uuid": "efcad0ad-8be3-4fb5-acb7-ef2d1b92d7c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3129", "type": "seen", "source": "https://t.me/cissp/4041", "content": "Red Team Tactics\n1. A new phishing technique for compromising Office 365 accounts\nhttps://o365blog.com/post/phishing\n]-> A proof-of-concept script to conduct a phishing attack abusing Microsoft 365 OAuth Authorization Flow:\nhttps://github.com/optiv/Microsoft365_devicePhish\n2. Two Factor Authentication Bypass Techniques\ud83e\udd78\nhttps://blog.securelayer7.net/two-factor-authentication-bypass-techniques\n\nBlue Team Techniques\nLaravel (<=8.4.2) exploit attempts for CVE-2021-3129 (debug mode: RCE)\nhttps://isc.sans.edu/forums/diary/Laravel+v842+exploit+attempts+for+CVE20213129+debug+mode+Remote+code+execution/27758\n\nResearch\n1Password Secret Retrieval - Methodology and Implementation\nhttps://posts.specterops.io/1password-secret-retrieval-methodology-and-implementation-6a9db3f3c709", "creation_timestamp": "2026-09-01T17:00:42.402689Z"}