██████╗  ██████╗  ██████╗ ████████╗███████╗██╗  ██╗███████╗██╗     ██╗     
   ██╔══██╗██╔═══██╗██╔═══██╗╚══██╔══╝██╔════╝██║  ██║██╔════╝██║     ██║     
   ██████╔╝██║   ██║██║   ██║   ██║   ███████╗███████║█████╗  ██║     ██║     
   ██╔══██╗██║   ██║██║   ██║   ██║   ╚════██║██╔══██║██╔══╝  ██║     ██║     
   ██║  ██║╚██████╔╝╚██████╔╝   ██║   ███████║██║  ██║███████╗███████╗███████╗
   ╚═╝  ╚═╝ ╚═════╝  ╚═════╝    ╚═╝   ╚══════╝╚═╝  ╚═╝╚══════╝╚══════╝╚══════╝

Welcome to RootShell

Hardcore cybersecurity deep dives & breaking security news

300
Posts
159
Studies
141
News

📚 ~/study - Cyber Deep Dives

159 postsView all →
studyOct 25, 202615 min read

Cross-Site WebSocket Hijacking (CSWSH): Exploiting CORS & CSRF Basics

Learn how insecure CORS policies and CSRF token reuse enable Cross-Site WebSocket Hijacking. The guide covers Origin header tricks, missing CORS checks, malicious frames and persistence techniques with hands-on examples.

websocketcsrfcorshijacking
studyOct 22, 202615 min read

HTTP/2 Request Smuggling Basics

Learn how HTTP/2 framing and HPACK header compression enable request smuggling, explore common vectors, and master detection and mitigation techniques.

http-2request-smugglingcybersecurityweb-security
studyOct 22, 202615 min read

Advanced Match Injection: WAF Evasion and Multi-Stage RCE

Explore how attackers craft complex match expressions to bypass Web Application Firewalls, bypass input sanitization, and chain multiple exploitation stages. Gain deep technical insight, real-world scenarios, and hardened defenses.

cybersecuritywafphprce
studyOct 19, 202615 min read

Advanced Time-Based Blind SQL Injection with Automation

Learn how to detect, measure, and automate time-based blind SQL injection attacks using SLEEP, WAITFOR DELAY, BENCHMARK, and probabilistic inference. Master WAF evasion, noise handling, and C2 integration for real-world exploitation.

sql-injectiontime-basedautomationsqlmap
studyOct 12, 202615 min read

Linux Capabilities Overview: A Beginner’s Guide

Learn what Linux capabilities are, how they differ from root, and how to audit and harden them on VMs and Docker containers.

linuxcapabilitiessecuritycontainers
studyOct 7, 202615 min read

RCE via PHP __autoload() Hijacking in Modern Frameworks

Master the advanced exploitation of PHP's legacy __autoload() to achieve remote code execution in today’s frameworks. Learn the magic method, craft malicious payloads, and defend against class injection attacks.

phprceautoloadsecurity

📡 ~/news - Security News

141 postsView all →
newsOct 25, 20268 min read

HPE ArubaOS AOS-8/AOS-10 Hit by Eight CVSS 10.0 Flaws - Patch Immediately

HPE disclosed eight critical CVSS 10.0 vulnerabilities (CVE-2026-79844 to CVE-2026-79851) affecting ArubaOS AOS-8 and AOS-10. The flaws enable unauthenticated authentication bypass, command injection, buffer overflows, and SQL injection, leading to remote code execution. Enterprises must apply the October 22-23 patches without delay.

ArubaOSCVE-2026-79844Wireless SecurityPatch Management
newsOct 24, 20268 min read

Amazon Threat Intelligence Spots PHP2Shell Exploits Weeks Before Public Disclosure

AWS security researchers detected PHP2Shell exploitation attempts on Oct. 17, 2026-four days before the official CVE release. Multiple proof-of-concepts emerged immediately after the embargo lift, indicating widespread, active attacks. The incident underscores how quickly attackers turn vulnerability details into live exploits.

phpvulnerabilityawsthreatintel
newsOct 22, 20268 min read

Palo Alto PAN-OS RCE (CVE-2026-0322) Exploited in the Wild - What You Need to Do Now

Palo Alto Networks disclosed that PAN-OS’s management interface is vulnerable to a remote code execution flaw (CVE-2026-0322). The vulnerability, with a CVSS score of 8.6, has already been exploited in the wild, allowing attackers with valid credentials to gain root access on PA-Series, VM-Series, Panorama, and M-Series appliances. Immediate patching and network isolation are mandatory.

PaloAltoNetworksPAN-OSCVE-2026-0322Firewall
newsOct 22, 20268 min read

Oracle EBS CVE-2026-101767: Critical Unauthenticated RCE Hits 12.2.x

Oracle’s October 2026 CPU patch fixes CVE-2026-101767, a 9.8-scored unauthenticated RCE in the Application Object Library that can be triggered over HTTP with no user interaction. All 12.2.3-12.2.15 EBS instances are vulnerable.

OracleCVE-2026-101767RCEEBS
newsOct 19, 20268 min read

Windows Shell Zero-Day (CVE-2026-96951) Now in the Wild

Microsoft’s CVE-2026-96951, a Windows Shell Mark-of-the-Web bypass, is actively exploited in the wild. The 8.8-scored zero-day affects all Windows 10/11 and Server 2025 systems, prompting CISA to add it to its KEV catalog with an urgent patch deadline.

WindowsZero-DayCVE-2026-96951Mark of the Web
newsOct 12, 20268 min read

Hikvision RCE Wave: Ukrainian Cameras Targeted Amid Russian Strikes

Hikvision cameras across Ukraine have become targets of remote command-execution attacks during Russian airstrikes. GreyNoise shows a surge in CVE-2021-36260 exploitation attempts from September 23 to October 1 2026, focusing on widely deployed devices and raising alarms for critical infrastructure.

cybersecurityhikvisionrceukraine

contact

Feel free to reach out for collaboration, security consulting, or just to say hello.

[email protected]