{"vulnerability": "cve-2021-31221", "sightings": [{"uuid": "215d08d8-e52e-42ce-929f-8344a15ad1c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31221", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3250", "content": "#Threat_Research\nIndicator of Compromise Scanner for CVE-2021-31221\nhttps://github.com/f1reeye/ioc-scanner-CVE-2021-31221\n// Features:\n- application log entries indicating successful exploitation\n- file system paths\u00a0of known dropped files\n- post-exploitation activity in\u00a0shell history\n- unexpected\u00a0crontab entries/scheduled tasks\n- ports\u00a0used by known malware", "creation_timestamp": "2021-04-30T11:02:06.000000Z"}, {"uuid": "49a003d1-5a85-4e23-a118-d6d88320e8eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31221", "type": "seen", "source": "https://t.me/cissp/3083", "content": "Red Team Tactics:\n1. Evasive shellcode loader for bypassing event-based injection detection (PoC)\nhttps://github.com/xinbailu/DripLoader\n2. Dashboard for conducting Backdoors\nand Breaches sessions over Zoom\nhttps://github.com/p3hndrx/B-B-Shuffle\n\nThreat Research:\nIndicator of Compromise Scanner for CVE-2021-31221\nhttps://github.com/f1reeye/ioc-scanner-CVE-2021-31221\n// Features:\n- application log entries indicating successful exploitation\n- file system paths\u00a0of known dropped files\n- post-exploitation activity in\u00a0shell history\n- unexpected\u00a0crontab entries/scheduled tasks\n- ports\u00a0used by known malware\n\nPHP Composer Vulnerability\nhttps://blog.sonarsource.com/php-supply-chain-attack-on-composer", "creation_timestamp": "2026-09-01T17:00:52.438168Z"}, {"uuid": "29ed06ff-df6a-48c8-b713-d5a145a9bf94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31221", "type": "seen", "source": "https://t.me/cissp/3083", "content": "Red Team Tactics:\n1. Evasive shellcode loader for bypassing event-based injection detection (PoC)\nhttps://github.com/xinbailu/DripLoader\n2. Dashboard for conducting Backdoors\nand Breaches sessions over Zoom\nhttps://github.com/p3hndrx/B-B-Shuffle\n\nThreat Research:\nIndicator of Compromise Scanner for CVE-2021-31221\nhttps://github.com/f1reeye/ioc-scanner-CVE-2021-31221\n// Features:\n- application log entries indicating successful exploitation\n- file system paths\u00a0of known dropped files\n- post-exploitation activity in\u00a0shell history\n- unexpected\u00a0crontab entries/scheduled tasks\n- ports\u00a0used by known malware\n\nPHP Composer Vulnerability\nhttps://blog.sonarsource.com/php-supply-chain-attack-on-composer", "creation_timestamp": "2026-09-02T01:04:41.634134Z"}]}