{"vulnerability": "cve-2021-29267", "sightings": [{"uuid": "df56fb9e-b2ba-4d13-8688-380c0dcf404f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29267", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3023", "content": "CVE-2021-29267:\nSherlockIM ChatBot XSS\nhttps://github.com/Security-AVS/CVE-2021-29267\n// SherlockIM - Platform for manage all kind of conversations with customers", "creation_timestamp": "2022-06-03T19:58:44.000000Z"}, {"uuid": "e8891c3c-6669-447e-8925-deae436eb60d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29267", "type": "seen", "source": "https://t.me/cissp/2809", "content": "Fingerprinting Tor relays with JARM & RECAP\nhttps://chaos.institute/fingeprinting-tor-relays-with-jarm\n]-> RECAP is a tool that generates JARM hashes for all known Tor relays:\nhttps://github.com/1cbf94bc-bc47-42b9-9197-244437fad1e6/recap\n\nOffensivesecurity\n1. Paving the Way to DA - Complete Post\nhttps://blog.zsec.uk/paving-2-da-wholeset\n2. Attack and Defend the Sys Admins\nhttps://blog.zsec.uk/old-but-gold\n\nCVE-2021-29267:\nSherlockIM ChatBot XSS (PoC)\nhttps://github.com/Security-AVS/CVE-2021-29267\n// SherlockIM - Platform for manage all kind of conversations with customers\n\nRed Team Tactics\n1. Bootstrap Fail - Persistent XSS via Opportunistic Domain Sniping\nhttps://www.sociosploit.com/2021/03/bootstrap-fail-persistent-xss-via.html?m=1\n2. Exfil data from RDP using Num, Cap, Scroll lock keys\nhttps://git.blackmarble.sh/init6/exfil-keylocks/-/tree/main\n3. kCTF is a Kubernetes-based infrastructure for CTF competitions\nhttps://google.github.io/kctf", "creation_timestamp": "2026-09-01T17:00:55.938237Z"}, {"uuid": "21d66a78-bc66-4aee-aac6-5f12abd1eb85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-29267", "type": "published-proof-of-concept", "source": "https://t.me/cissp/2809", "content": "Fingerprinting Tor relays with JARM & RECAP\nhttps://chaos.institute/fingeprinting-tor-relays-with-jarm\n]-> RECAP is a tool that generates JARM hashes for all known Tor relays:\nhttps://github.com/1cbf94bc-bc47-42b9-9197-244437fad1e6/recap\n\nOffensivesecurity\n1. Paving the Way to DA - Complete Post\nhttps://blog.zsec.uk/paving-2-da-wholeset\n2. Attack and Defend the Sys Admins\nhttps://blog.zsec.uk/old-but-gold\n\nCVE-2021-29267:\nSherlockIM ChatBot XSS (PoC)\nhttps://github.com/Security-AVS/CVE-2021-29267\n// SherlockIM - Platform for manage all kind of conversations with customers\n\nRed Team Tactics\n1. Bootstrap Fail - Persistent XSS via Opportunistic Domain Sniping\nhttps://www.sociosploit.com/2021/03/bootstrap-fail-persistent-xss-via.html?m=1\n2. Exfil data from RDP using Num, Cap, Scroll lock keys\nhttps://git.blackmarble.sh/init6/exfil-keylocks/-/tree/main\n3. kCTF is a Kubernetes-based infrastructure for CTF competitions\nhttps://google.github.io/kctf", "creation_timestamp": "2026-09-11T14:00:06.421738Z"}]}