Web and bind shells

A web shell is a malicious program uploaded to a target web server, enabling adversaries to execute commands remotely. It often serves as…

Step 1: The Root Cause — Visitors Plugin Vulnerability

Hello guy, am evilfeonix! The Digital Firebird.

Symantec exposed a Russian-aligned espionage campaign in Ukraine using LotL tactics. Attackers used a Sandworm-linked webshell (Localolive) and abused scheduled tasks to dump credentials and bypass Windows Defender.

This write-up covers the Host & Network Penetration Testing: Exploitation CTF 3from the INE Penetration Testing Student course, preparing…

Hey Everyone,

SQL injection is one of the most fundamental vulnerabilities in web applications, and mastering it is essential for anyone starting out in…

A college student is selling access to 5,200+ gov/edu sites via the undetectable Beima PHP Webshell. The custom backdoor allows full RCE and fuels a growing cybercrime freelancing marketplace.

CISA KEV adds EOL D-Link and Array Networks flaws. ArrayOS AG (CVE-2025-66644) is actively exploited in Japan to drop PHP webshells. Retire EOL D-Link and patch ArrayOS AG immediately.

Explore web shell detection by analyzing logs, file systems, and network traffic.

Bee

Hunt Intelligence uncovers a massive Iranian-nexus breach targeting the Omani Ministry of Justice. 26k records leaked via an unprotected UAE staging server.

Cyble researchers uncover a widespread FreePBX exploitation campaign by INJ3CTOR3 deploying the novel JOMANGY webshell for toll fraud.

Generate, customise, and deploy shell payloads with msfvenom, Metasploit, and webshells

At a glance Actor / group Unattributed malicious cyber actors Activity Mass exploitation of CMS flaws to deploy webshells Targets / victims WordPress and other CMS sites; many Australian SMBs Scal…

Attackers are already dropping webshells on WordPress sites through a flaw in WordPress Core itself. The bug chain, named wp2shell, delivers an unauthenticated WordPress Core RCE. No plugin, no th…

Recently, I felt like flexing some web exploitation skills and decided to warm up with a classic: uploading a web shell, getting code…