{"uuid": "fbab9fce-36ca-456f-a307-5d6df44399cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-2471", "type": "seen", "source": "https://t.me/cissp/4671", "content": "Offensive security\n1. Hacking JSON Web Tokens (JWTs)\nhttps://infosecwriteups.com/hacking-json-web-tokens-jwts-a6eea2753d23\n2. Collection of remote authentication triggers\nhttps://github.com/cube0x0/SharpSystemTriggers\n\nBlue Team Techniques\n10 Types of Web Vulnerabilities that are Often Missed\nhttps://labs.detectify.com/2021/09/30/10-types-web-vulnerabilities-often-missed\n\nexploit\nCVE-2021-2471:\nSQLXML XXE vulnerability reproduction\nhttps://github.com/SecCoder-Security-Lab/jdbc-sqlxml-xxe\n\nMalware analysis\n1. VNC Malware (TinyNuke, TightVNC)\nUsed by Kimsuky Group\nhttps://asec.ahnlab.com/en/27346\n2. Franken-phish: TodayZoo built from other phishing kits\ud83d\ude0a\nhttps://www.microsoft.com/security/blog/2021/10/21/franken-phish-todayzoo-built-from-other-phishing-kits\n\n\n\u200e\u200b", "creation_timestamp": "2026-09-02T01:04:22.156770Z"}