{"uuid": "b745921b-1e44-471c-acf7-cbfc31e26777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-14343", "type": "seen", "source": "https://t.me/onelab1337/1551", "content": "\ud83c\udf40 Graphql Exploitation \ud83c\udf40\n\nPart 1- Understanding Graphql & Enumeration of Graphql Schema\n\nhttps://payatu.com/blog/manmeet/graphql-exploitation-part-1\n\nPart 2- Unauthorized Execution of Queries\n\nhttps://payatu.com/blog/manmeet/graphql-exploitation-part-2\n\nPart 3- Injection attacks and XSS attacks\n\nhttps://payatu.com/blog/manmeet/graphql-exploitation-part-3\n\nPart 4- Resource Exhaustion (DOS)\n\nhttps://payatu.com/blog/manmeet/graphql-exploitation-part-4\n\nOffensive security\n\n1. Template-Driven AV/EDR Evasion Framework\n\nhttps://github.com/klezVirus/inceptor#installation\n\n2. A script that monitors and extracts requested URLs/clients connected to the service by exploiting publicly accessible Apache server-status instances\n\nhttps://github.com/mazen160/server-status_PWN\n\nexploit\nExperimenting with the CVE-2020-14343 PyYAML vulnerability\n\nhttps://github.com/raul23/pyyaml-CVE-2020-14343\n\nRed Team Tactics\nRed Team Attack Lab for TTP testing & research\n\nhttps://github.com/Marshall-Hallenbeck/red_team_attack_lab", "creation_timestamp": "2026-08-09T05:02:32.573880Z"}