██████╗  ██████╗  ██████╗ ████████╗███████╗██╗  ██╗███████╗██╗     ██╗     
   ██╔══██╗██╔═══██╗██╔═══██╗╚══██╔══╝██╔════╝██║  ██║██╔════╝██║     ██║     
   ██████╔╝██║   ██║██║   ██║   ██║   ███████╗███████║█████╗  ██║     ██║     
   ██╔══██╗██║   ██║██║   ██║   ██║   ╚════██║██╔══██║██╔══╝  ██║     ██║     
   ██║  ██║╚██████╔╝╚██████╔╝   ██║   ███████║██║  ██║███████╗███████╗███████╗
   ╚═╝  ╚═╝ ╚═════╝  ╚═════╝    ╚═╝   ╚══════╝╚═╝  ╚═╝╚══════╝╚══════╝╚══════╝

Welcome to RootShell

Hardcore cybersecurity deep dives & breaking security news

277
Posts
149
Studies
128
News

📚 ~/study - Cyber Deep Dives

149 postsView all →
studyAug 11, 202615 min read

Pass-the-Hash Fundamentals: Theory, Tools, and Defensive Strategies

Learn the inner workings of NTLM hashes, why Pass-the-Hash works, common tooling, attack scenarios, and how to detect and mitigate PTHT in Windows environments.

pass-the-hashntlmlateral-movementdefense
studyAug 5, 202615 min read

DNS Tunneling 101: Fundamentals, Tools, and Threat Landscape

Learn the core concepts behind DNS tunneling, explore popular tools like Iodine, DNSCat2, and DNS2TCP, and discover real-world attack techniques and defensive controls.

dns-tunnelingc2network-securitymalware
studyAug 4, 202615 min read

AWS S3 Bucket Enumeration 101: Fundamentals & Tools

Learn how to discover, enumerate, and assess Amazon S3 buckets using built-in CLI commands and popular open-source scanners, understand region resolution, and safely list objects. This guide gives hands-on examples and defensive recommendations.

awss3enumerationsecurity
studyAug 3, 202615 min read

Exploiting runc (CVE-2021-3493): From Detection to Host Root Shell

A step-by-step walkthrough of identifying vulnerable runc binaries, crafting a malicious container, bypassing seccomp/AppArmor, and gaining a host root shell. Includes mitigation guidance for security teams.

runccve-2021-3493privilege-escalationdocker
studyAug 2, 202615 min read

Abusing HTTP/2 Stream Multiplexing for Tunneling & Exfiltration

Learn how attackers exploit HTTP/2 multiplexing to hide reverse shells, exfiltrate data, and bypass validation. The guide covers stream lifecycle, crafting parallel streams, server-push abuse, and practical lab exercises.

http2multiplexingtunnelingexfiltration
studyJul 31, 202615 min read

Mastering SSRF Exploitation with the Gopher Protocol

Learn how to craft gopher URLs, embed HTTP requests, bypass sanitizers, target internal services, chain protocols, and defend against these powerful SSRF techniques.

ssrfgopherexploitationsecurity

📡 ~/news - Security News

128 postsView all →
newsAug 6, 20268 min read

CISA Flags Critical Langflow, Tomcat, and N-central Flaws in KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added three high-severity vulnerabilities-IBM Langflow, Apache Tomcat, and N-able N-central-to its Known Exploited Vulnerabilities (KeV) catalog. Federal agencies must remediate by Aug 7 2026, and the advisory warns all enterprises using these products to act immediately.

CISAKeVApache TomcatLangflow
newsAug 5, 20268 min read

Adobe Campaign Classic Hit by Three Critical Unauthenticated RCE Flaws

Adobe disclosed three CVSS 10.0 vulnerabilities (CVE-2026-48331, CVE-2026-48323, CVE-2026-48330) that allow unauthenticated attackers to execute arbitrary code on Campaign Classic servers. Immediate upgrade to build 9399 is mandatory for all internet-facing deployments.

Adobe Campaign ClassicCVEArbitrary Code ExecutionPatch
newsAug 4, 20268 min read

Critical N-able N-central Auth Bypass (CVE-2026-18556/18577) Exploited in the Wild

In early August 2026 attackers leveraged two critical authentication-bypass flaws in N-able's N-central RMM platform to obtain full admin rights and pivot into client environments. An incomplete hot-fix left a secondary attack path open, prompting urgent remediation for all MSPs.

N-centralRMMAuthentication BypassMSP Security
newsAug 3, 20268 min read

Critical VMware Flaws Expose Auth Bypass, Code Exec, and VM Escape

Three newly disclosed VMware vulnerabilities-CVE-2026-47876, CVE-2026-41703, and CVE-2026-41709-enable authentication bypass, host code execution, VM escape, and stealthy admin actions. Broadcom’s patches for ESXi, vSphere, Workstation, Fusion and Cloud Foundation are now available.

VMwareCVESecurityVM Escape
newsAug 2, 20268 min read

Critical Cisco FMC Static Credentials Flaw (CVE-2026-20316) Under Active Exploitation

Cisco Secure Firewall Management Center (FMC) contains hard-coded low-privilege credentials (CVE-2026-20316) that attackers are using to gain unauthenticated access. The vulnerability is listed in CISA’s KEV catalog, with active exploitation confirmed across multiple sectors.

CiscoFMCCVE-2026-20316Vulnerability
newsJul 31, 20268 min read

Apache Syncope Flaws Enable Privilege Escalation and Remote Code Execution

Multiple CVEs in Apache Syncope (3.0.0-M0 through 4.1.1) allow low-privileged users to self-escalate to admin, perform SSRF, SQL injection, and chain to full remote code execution. Patches released in 4.1.24.1, 4.1.24.1.2, and 4.0.74.0.7.

Apache SyncopeCVEPrivilege EscalationRemote Code Execution

contact

Feel free to reach out for collaboration, security consulting, or just to say hello.

[email protected]