{"uuid": "00b9c4ea-18cf-4816-a9df-f7c65e17c7ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-17087", "type": "seen", "source": "https://t.me/cissp/4670", "content": "Offensive security\nCVE-2020-17087:\nExploiting the CNG.sys IOCTL 0x3904 Pool Overflow Vulnerability (PoC)\nhttps://www.pixiepointsecurity.com/blog/nday-cve-2020-17087.html\n\nThreat Research\n1. TA551 Uses \"Sliver\" Red Team Tool in New Activity\nhttps://www.proofpoint.com/us/blog/security-briefs/ta551-uses-sliver-red-team-tool-new-activity\n]-> Adversary Emulation Framework:\nhttps://github.com/BishopFox/sliver\n\n2. Better know a data source:\nProcess command line\ud83d\ude19\nhttps://redcanary.com/blog/process-command-line\n\nRed Team Tactics\n1. Servers are overrated -\nBypassing corporate proxies (ab) using serverless\nhttps://redteamer.tips/servers-are-overrated-bypassing-corporate-proxies-abusing-serverless-for-fun-and-profit \n]-> Code Examples:\nhttps://github.com/jfmaes/FunWithServerless\n2. Windows: IKEEXT AuthIP Unvalidated GSS_ID EoP\n(Win10/Server 2022)\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2213\n\nsecurity\nOversecured Vulnerable iOS App\nhttps://github.com/oversecured/ovia\n// iOS app that aggregates all the platform's known\nand popular security vulnerabilities", "creation_timestamp": "2026-09-01T17:00:37.611243Z"}