{"uuid": "725ea11e-de28-43e9-824c-3e36ce071191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42306", "type": "seen", "source": "https://t.me/cissp/4834", "content": "Offensive_security\n1. CVE-2021-42306 CredManifest:\nApp Registration Certificates Stored in Azure AD\nhttps://www.netspi.com/blog/technical/cloud-penetration-testing/azure-cloud-vulnerability-credmanifest\n2. Windows Security Updates for Hackers\ud83d\ude0e\nhttps://bitsadm.in/blog/windows-security-updates-for-hackers\n\nMalware_analysis\nStrategic web compromises\n(aka watering hole) in the Middle East\nwith a pinch of Candiru\ud83e\udd74\nhttps://www.welivesecurity.com/2021/11/16/strategic-web-compromises-middle-east-pinch-candiru\n\nRed_Team_Tactics\n1. TPM sniffing\nhttps://blog.scrt.ch/2021/11/15/tpm-sniffing\n2. Exploit para Apache Struts v2 (RCE)\nhttps://github.com/andre3llo/apachestruts\n\nThreat_Research\nDiving into Open-source LMS Codebases\ud83e\udd14\nhttps://starlabs.sg/blog/2021/11/diving-into-open-source-lms-codebases\n\nsecurity\nAdversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red/Blue Teams\nhttps://github.com/Trusted-AI/adversarial-robustness-toolbox\n// This material is partially based upon work supported by the DARPA under Contract No. HR001120C0013", "creation_timestamp": "2026-09-01T17:00:35.229672Z"}