{"uuid": "7d4b2c59-2f88-41ae-810b-8fd4dcf48d1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32789", "type": "seen", "source": "https://t.me/cissp/4683", "content": "exploit\nCVE-2021-32789:\nWooCommerce exploit\nhttps://github.com/andnorack/CVE-2021-32789\n\nRed Team Tactics\n1. Weaponizing a NFC reader for basic timing attacks\nhttps://ceres-c.it/2021/10/24/weaponizing-NFC-reader\n2. Advanced request smuggling\nhttps://portswigger.net/web-security/request-smuggling/advanced\n\nOffensive security\nFull-featured C2 framework which silently persists\non webserver with a single-line PHP backdoor\nhttps://github.com/nil0x42/phpsploit\n\nMalware analysis\n1. Outlook Web Access Phishing\ud83d\ude42\nhttps://isc.sans.edu/forums/diary/Hunting+for+Phishing+Sites+Masquerading+as+Outlook+Web+Access/27974\n2. Wslink: Unique and undocumented malicious loader that runs as a server\nhttps://www.welivesecurity.com/2021/10/27/wslink-unique-undocumented-malicious-loader-runs-server\n3. PinkBot Botnet Uses DoH\nhttps://blog.netlab.360.com/pinkbot\n\nAnalytics\nThreat Research\nAPT Trends Report Q3 2021\ud83d\udc4d\ud83c\udffd\nhttps://securelist.com/apt-trends-report-q3-2021/104708", "creation_timestamp": "2026-09-02T01:04:21.946838Z"}