{"vulnerability": "CVE-2020-35774", "sightings": [{"uuid": "d78f3200-e790-4e0f-962f-42c3f7a7c92e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35774", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/2466", "content": "#exploit\nCVE-2020-35774:\nTwitter-server XSS Vulnerability\nhttps://securityboulevard.com/2021/01/cve-2020-35774-twitter-server-xss-vulnerability-discovered", "creation_timestamp": "2024-09-16T16:08:19.000000Z"}, {"uuid": "1d69d144-1d0f-4bb3-8c06-a0bed9729d47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35774", "type": "seen", "source": "https://t.me/cissp/2057", "content": "1. C2 Traffic Patterns\nhttps://marcoramilli.com/2021/01/09/c2-traffic-patterns-personal-notes\n\n2. \"Little Yellow Duck\" APT\nhttps://github.com/Loveforkeeps/Lemon-Duck\n\n3. Meet Oski Stealer: An In-depth Analysis of the Popular Credential Stealer\nhttps://www.cyberark.com/resources/threat-research-blog/meet-oski-stealer-an-in-depth-analysis-of-the-popular-credential-stealer\n\n4. Analysis of the NetWire RAT campaign\nhttps://blog.bushidotoken.net/2021/01/analysis-of-netwire-rat-campaign.html?m=1\n\nUsing Windows Disposable VMs for test and research\nhttps://rolando.anton.sh/blog/2021/01/01/using-windows-disposable-vms-for-test-and-research\n\n]-> A packer project to generate Windows EVAL images to use it on test/dev/hack/IR labs\nhttps://github.com/rolando-anton/packer-disposable-windows\n\n1. Hack crypto secrets from heap memory to exploit Android application\nhttps://medium.com/bugbountywriteup/hack-crypto-secrets-from-heap-memory-to-exploit-android-application-728097fcda3\n\n2. CMS Made Simple 2.2.15 - Authenticated RCE\nhttps://infosecresearchlab.blogspot.com/2020/12/cms-made-simple-2215-authenticated-rce.html?m=1\n\n3. NTLM BITS SYSTEM Token Impersonation\nhttps://packetstormsecurity.com/files/160829/bits_ntlm_token_impersonation.rb.txt\n\n\"Bypassing Anti-Viruses by C#.NET Programming\", 2020.\nhttps://damonmohammadbagher.github.io/Posts/ebookBypassingAVsByCsharpProgramming/index.htm\n\nCVE-2020-35774:\nTwitter-server XSS Vulnerability (PoC)\nhttps://securityboulevard.com/2021/01/cve-2020-35774-twitter-server-xss-vulnerability-discovered/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+SecurityBloggersNetwork+%28Security+Bloggers+Network%29", "creation_timestamp": "2026-09-01T17:01:07.901119Z"}, {"uuid": "f72b5348-628e-4a0d-afde-cfcd8640886d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-35774", "type": "seen", "source": "https://t.me/cissp/2057", "content": "1. C2 Traffic Patterns\nhttps://marcoramilli.com/2021/01/09/c2-traffic-patterns-personal-notes\n\n2. \"Little Yellow Duck\" APT\nhttps://github.com/Loveforkeeps/Lemon-Duck\n\n3. Meet Oski Stealer: An In-depth Analysis of the Popular Credential Stealer\nhttps://www.cyberark.com/resources/threat-research-blog/meet-oski-stealer-an-in-depth-analysis-of-the-popular-credential-stealer\n\n4. Analysis of the NetWire RAT campaign\nhttps://blog.bushidotoken.net/2021/01/analysis-of-netwire-rat-campaign.html?m=1\n\nUsing Windows Disposable VMs for test and research\nhttps://rolando.anton.sh/blog/2021/01/01/using-windows-disposable-vms-for-test-and-research\n\n]-> A packer project to generate Windows EVAL images to use it on test/dev/hack/IR labs\nhttps://github.com/rolando-anton/packer-disposable-windows\n\n1. Hack crypto secrets from heap memory to exploit Android application\nhttps://medium.com/bugbountywriteup/hack-crypto-secrets-from-heap-memory-to-exploit-android-application-728097fcda3\n\n2. CMS Made Simple 2.2.15 - Authenticated RCE\nhttps://infosecresearchlab.blogspot.com/2020/12/cms-made-simple-2215-authenticated-rce.html?m=1\n\n3. NTLM BITS SYSTEM Token Impersonation\nhttps://packetstormsecurity.com/files/160829/bits_ntlm_token_impersonation.rb.txt\n\n\"Bypassing Anti-Viruses by C#.NET Programming\", 2020.\nhttps://damonmohammadbagher.github.io/Posts/ebookBypassingAVsByCsharpProgramming/index.htm\n\nCVE-2020-35774:\nTwitter-server XSS Vulnerability (PoC)\nhttps://securityboulevard.com/2021/01/cve-2020-35774-twitter-server-xss-vulnerability-discovered/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+SecurityBloggersNetwork+%28Security+Bloggers+Network%29", "creation_timestamp": "2026-09-02T01:04:57.057105Z"}]}