Once start up target website and it provide us to upload file.

Two flaws in Versa Director SD-WAN allow authenticated RCE via insecure file uploads and privilege escalation via webhook abuse. PoC code is public.

Perkembangan Webshell

CISA issues an urgent warning about "ToolShell," a sophisticated exploit chain targeting SharePoint servers with multiple vulnerabilities to install webshells and steal crypto keys.

Explore web shell detection by analyzing logs, file systems, and network traffic

Web and bind shells

A web shell is a malicious program uploaded to a target web server, enabling adversaries to execute commands remotely. It often serves as…

Step 1: The Root Cause — Visitors Plugin Vulnerability

Hello guy, am evilfeonix! The Digital Firebird.

Symantec exposed a Russian-aligned espionage campaign in Ukraine using LotL tactics. Attackers used a Sandworm-linked webshell (Localolive) and abused scheduled tasks to dump credentials and bypass Windows Defender.

This write-up covers the Host & Network Penetration Testing: Exploitation CTF 3from the INE Penetration Testing Student course, preparing…

Hey Everyone,

SQL injection is one of the most fundamental vulnerabilities in web applications, and mastering it is essential for anyone starting out in…

A college student is selling access to 5,200+ gov/edu sites via the undetectable Beima PHP Webshell. The custom backdoor allows full RCE and fuels a growing cybercrime freelancing marketplace.

CISA KEV adds EOL D-Link and Array Networks flaws. ArrayOS AG (CVE-2025-66644) is actively exploited in Japan to drop PHP webshells. Retire EOL D-Link and patch ArrayOS AG immediately.

Explore web shell detection by analyzing logs, file systems, and network traffic.

Bee

Hunt Intelligence uncovers a massive Iranian-nexus breach targeting the Omani Ministry of Justice. 26k records leaked via an unprotected UAE staging server.