██████╗  ██████╗  ██████╗ ████████╗███████╗██╗  ██╗███████╗██╗     ██╗     
   ██╔══██╗██╔═══██╗██╔═══██╗╚══██╔══╝██╔════╝██║  ██║██╔════╝██║     ██║     
   ██████╔╝██║   ██║██║   ██║   ██║   ███████╗███████║█████╗  ██║     ██║     
   ██╔══██╗██║   ██║██║   ██║   ██║   ╚════██║██╔══██║██╔══╝  ██║     ██║     
   ██║  ██║╚██████╔╝╚██████╔╝   ██║   ███████║██║  ██║███████╗███████╗███████╗
   ╚═╝  ╚═╝ ╚═════╝  ╚═════╝    ╚═╝   ╚══════╝╚═╝  ╚═╝╚══════╝╚══════╝╚══════╝

Welcome to RootShell

Hardcore cybersecurity deep dives & breaking security news

260
Posts
141
Studies
119
News

📚 ~/study - Cyber Deep Dives

141 postsView all →
studyJul 17, 202615 min read

Operator Injection in MongoDB: Bypassing Auth with $ne, $gt, $lt

Learn how MongoDB operator injection using $ne, $gt, $lt (and related operators) can bypass naïve authentication, how to craft payloads, test them, and implement robust defenses.

mongodbnosql-injectionauthentication-bypasssecurity-testing
studyJul 15, 202615 min read

Advanced SVG XXE Exploitation: Multi-Stage RCE via Rendering Engines

Learn how SVG-based XML external entity attacks can bypass file checks, exfiltrate data, and chain into ImageMagick, librsvg or GD to achieve remote code execution on vulnerable servers.

xxesvgrceimageprocessing
studyJul 14, 202615 min read

Certificate Transparency Log Mining 101: Fundamentals and Data Sources

Learn the basics of Certificate Transparency (CT) logs, how to query them via crt.sh, automate extraction with Python, parse results, and correlate with DNS history to spot phishing and typosquatting.

certificate-transparencyct-logsreconnaissancepython
studyJul 13, 202615 min read

SSRF Port Scanning via Error Messages - Techniques & Automation

Learn how to turn SSRF into a stealthy port scanner by leveraging error messages, timing, and response codes. Covers payload crafting, automated tools, bypass tricks, and enumeration of internal services.

ssrfportscanningerrormessagesautomation
studyJul 7, 202615 min read

POODLE Attack Deep Dive: Exploiting SSLv3 Downgrade

Learn how the POODLE padding-oracle works, why SSLv3 fallback exists, and how to craft malicious payloads with OpenSSL and Python. Walk through downgrade forcing with sslsplit/mitmproxy, exfiltration techniques, and robust mitigations.

poodlessl3downgradepadding-oracle
studyJul 1, 202615 min read

DNS Rebinding Fundamentals: Theory and Attack Surface

Learn the core mechanics of DNS rebinding, how it defeats the browser's same-origin policy, and why internal services like routers or Docker APIs become easy targets. Practical payloads, server setup, detection and mitigation are covered.

dns-rebindingweb-securityattack-techniquesdefense

📡 ~/news - Security News

119 postsView all →
newsJul 17, 20268 min read

SonicWall SMA1000 Zero-Day Crisis: Critical SSRF & Code Injection Actively Exploited

Two zero-day flaws (CVE-2026-15409, CVE-2026-15410) in SonicWall SMA1000 appliances are being weaponised in the wild. The SSRF bug scores a perfect 10.0 CVSS, while the code-injection flaw rates 7.2, prompting urgent hotfixes and CISA KEV alerts.

SonicWallZero-DaySSRFCode Injection
newsJul 15, 20268 min read

Microsoft July 2026 Patch Tuesday Breaks Records: 622 Fixes, 2 Active Zero-Days

Microsoft’s July 2026 Patch Tuesday delivered a historic 622 vulnerability fixes, far exceeding any prior month. Two zero-days - CVE-2026-56155 (AD FS) and CVE-2026-56164 (SharePoint) - were actively exploited, and a critical VM-escape (CVE-2026-57092) threatens hyper-visors.

MicrosoftPatch TuesdayZero-DayVulnerability Management
newsJul 14, 20268 min read

Ubiquiti Deploys Critical Patches for UniFi Suite - CVE-2026 Flaws Fixed

Ubiquiti has released emergency updates for UniFi Connect, Talk, Access, Protect, and UniFi OS, addressing four critical CVEs (CVE-2026-55115, CVE-2026-54402, CVE-2026-50746, CVE-2026-50747) with CVSS scores up to 10.0. The flaws enable SSRF, unauthenticated command injection, and authenticated SQL injection, posing severe risk to enterprise and ISP deployments.

UbiquitiUniFiCVESecurity Patch
newsJul 13, 20268 min read

RoguePlanet Zero-Day (CVE-2026-50656) Patched: Critical Defender Privilege-Escalation Fixed

Microsoft released an out-of-band update on July 9, 2026 that patches the RoguePlanet race-condition in mpengine.dll (CVE-2026-50656). The flaw let a low-privileged user spawn a SYSTEM-level command prompt, and a public PoC showed 100 % success on vulnerable machines.

Microsoft DefenderZero-DayPrivilege EscalationPatch
newsJul 7, 20268 min read

Bad Epoll (CVE-2026-46242): Critical Linux/Android Root Escalation

A newly disclosed kernel flaw (CVE-2026-46242) in the epoll subsystem lets any unprivileged user gain root on Linux servers, desktops, and Android devices. The bug, uncovered by Anthropic’s AI model Mythos, can be chained from Chrome’s renderer sandbox for full kernel code execution.

LinuxKernelVulnerabilityRoot Access
newsJul 1, 20268 min read

Cisco SD-WAN Zero-Day (CVE-2026-20245) Exploited for Months Before Patch

Mandiant discovered that threat actors leveraged CVE-2026-20245 to gain root on Cisco Catalyst SD-WAN Manager devices months before Cisco disclosed and patched the flaw, marking the seventh SD-WAN zero-day of 2026.

CiscoSD-WANZero-DayCVE-2026-20245

contact

Feel free to reach out for collaboration, security consulting, or just to say hello.

[email protected]