research

4 posts

PHP2Shell: Critical PHP RCE Vulnerabilities Explained

A concise security research overview of PHP2Shell, its impact, affected versions, and remediation.

2026-10-24·4 min read

researchphprce

Scam 2026: Analyzing the Social Engineering Behind a Viral X Crowdfunding Scam

A cybersecurity analysis of the 2026 X crowdfunding scam, covering social engineering, OSINT verification, trust exploitation, and community-driven detection.

2026-10-08·9 min read

researchsocial-engineeringosint

wp2shell: Unpacking the WordPress Batch API Desync That Led to Pre-Auth RCE

A root-cause breakdown of CVE-2026-63030 and CVE-2026-60137, the array-desync bug in WordPress's REST batch endpoint that chains into SQLi and full unauthenticated site takeover.

2026-07-25·7 min read

wordpresssqlirce

Old Commits, Live Credentials: The Git History Blind Spot

Why secret scanning limited to HEAD misses a whole class of long-lived exposure, and the sweep methodology we now run on every engagement.

2026-06-25·4 min read

researchsecretsgit