{"uuid": "33e925f5-bef0-45e5-a22e-1d5f8f7b8fa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-25223", "type": "seen", "source": "https://t.me/cissp/4342", "content": "The making of a MySQL Canarytoken\nhttps://blog.thinkst.com/2021/09/a-mysql-canarytoken.html\n\nThreat Research\nSophos UTM Preauth RCE:\nA Deep Dive into CVE-2020-25223\nhttps://www.atredis.com/blog/2021/8/18/sophos-utm-cve-2020-25223\n]-> PoC:\nhttps://github.com/twentybel0w/CVE-2020-25223\n\nRed Team Tactics\n1. Bypassing GCP Org Policy with Custom Metadata\nhttps://kattraxler.github.io/gcp/hacking/2021/09/10/gcp-org-policy-bypass-ai-notebooks.html\n2. Deanonymizing LinkedIn Users\nhttps://blog.h3xstream.com/2021/04/deanonymizing-linkedin-users.html\n// Privacy issues with some of LinkedIn\u2019s external APIs\n\nOffensive security\n1. SleepyCrypt:\nEncrypting a running PE image while it\u00a0sleeps\nhttps://www.solomonsklash.io/SleepyCrypt-shellcode-to-encrypt-a-running-image.html\n2. Azure Outlook Command & Control (C2) - Remotely control a compromised Windows Device from your Outlook mailbox\nhttps://github.com/boku7/azureOutlookC2", "creation_timestamp": "2026-09-01T17:00:40.812171Z"}