{"uuid": "fa6175fd-1635-4226-83a8-75b4bfced246", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22555", "type": "seen", "source": "https://t.me/cissp/3789", "content": "Threat Research\nCVE-2021-22555 - heap out-of-bounds write vulnerability in Linux Netfilter\nhttps://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html\n]-> PoC Exploit:\nhttps://github.com/google/security-research/tree/master/pocs/linux/cve-2021-22555\n\nRed Team Tactics\n1. Tool for taking over Active Directory user/computer accounts by manipulating their msDS-KeyCredentialLink attribute, effectively adding \"Shadow Credentials\" to the target account\ud83d\udc4d\ud83c\udffd\nhttps://github.com/eladshamir/Whisker\n2. Discovering an Authentication Bypass with r2 and Frida\nhttps://bananamafia.dev/post/satisfyer\n\n Malware analysis\n1. LuminousMoth APT:\nSweeping attacks for the chosen few\nhttps://securelist.com/apt-luminousmoth/103332\n2. Joker Android Fleezware\nhttps://blog.zimperium.com/joker-is-still-no-laughing-matter\n#exploit\nCVE-2021-1879:\nUse-After-Free in QuickTimePluginReplacement\nhttps://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1879.html", "creation_timestamp": "2026-09-01T17:00:46.112910Z"}