██████╗  ██████╗  ██████╗ ████████╗███████╗██╗  ██╗███████╗██╗     ██╗     
   ██╔══██╗██╔═══██╗██╔═══██╗╚══██╔══╝██╔════╝██║  ██║██╔════╝██║     ██║     
   ██████╔╝██║   ██║██║   ██║   ██║   ███████╗███████║█████╗  ██║     ██║     
   ██╔══██╗██║   ██║██║   ██║   ██║   ╚════██║██╔══██║██╔══╝  ██║     ██║     
   ██║  ██║╚██████╔╝╚██████╔╝   ██║   ███████║██║  ██║███████╗███████╗███████╗
   ╚═╝  ╚═╝ ╚═════╝  ╚═════╝    ╚═╝   ╚══════╝╚═╝  ╚═╝╚══════╝╚══════╝╚══════╝

Welcome to RootShell

Hardcore cybersecurity deep dives & breaking security news

264
Posts
143
Studies
121
News

📚 ~/study - Cyber Deep Dives

143 postsView all →
studyJul 26, 202615 min read

Identifying API Rate Limiting Controls: An Introductory Guide

Learn how to discover, interpret, and fingerprint rate-limiting mechanisms in modern APIs. This guide covers common algorithms, header analysis, response codes, enforcement points, and practical tooling.

api-securityrate-limitingweb-application-testingcybersecurity
studyJul 20, 202615 min read

Introductory Guide to Crafting and Deploying Adversarial Examples Against Deep Learning Models

Learn the fundamentals of adversarial machine learning, from threat models and white-box attacks to black-box queries, transferability, toolkits, and real-world physical attacks. Practical code, defenses, and exercises are included.

adversarial-mlmachine-learningsecuritydeep-learning
studyJul 17, 202615 min read

Operator Injection in MongoDB: Bypassing Auth with $ne, $gt, $lt

Learn how MongoDB operator injection using $ne, $gt, $lt (and related operators) can bypass naïve authentication, how to craft payloads, test them, and implement robust defenses.

mongodbnosql-injectionauthentication-bypasssecurity-testing
studyJul 15, 202615 min read

Advanced SVG XXE Exploitation: Multi-Stage RCE via Rendering Engines

Learn how SVG-based XML external entity attacks can bypass file checks, exfiltrate data, and chain into ImageMagick, librsvg or GD to achieve remote code execution on vulnerable servers.

xxesvgrceimageprocessing
studyJul 14, 202615 min read

Certificate Transparency Log Mining 101: Fundamentals and Data Sources

Learn the basics of Certificate Transparency (CT) logs, how to query them via crt.sh, automate extraction with Python, parse results, and correlate with DNS history to spot phishing and typosquatting.

certificate-transparencyct-logsreconnaissancepython
studyJul 13, 202615 min read

SSRF Port Scanning via Error Messages - Techniques & Automation

Learn how to turn SSRF into a stealthy port scanner by leveraging error messages, timing, and response codes. Covers payload crafting, automated tools, bypass tricks, and enumeration of internal services.

ssrfportscanningerrormessagesautomation

📡 ~/news - Security News

121 postsView all →
newsJul 27, 20268 min read

Critical SharePoint RCE CVE-2026-50522 Enables Machine-Key Theft and Persistent Access

A critical deserialization flaw (CVE-2026-50522) in on-premises Microsoft SharePoint Server is being actively exploited. Attackers leverage a public PowerShell PoC to steal SharePoint machine-keys, granting long-term impersonation even after patching.

SharePointRCECVE-2026-50522Machine-Key Theft
newsJul 26, 20268 min read

WP2Shell: GPT-5.6 Auto-Generates Critical WordPress RCE Chain

OpenAI's GPT-5.6 Sol Ultra was prompted to discover and chain two WordPress Core flaws (CVE-2026-63030 and CVE-2026-60137), producing the WP2Shell exploit that enables unauthenticated remote code execution. Active exploitation is already seen in the wild, putting millions of default WordPress sites at critical risk.

WordPressAI SecurityZero-DayRemote Code Execution
newsJul 17, 20268 min read

SonicWall SMA1000 Zero-Day Crisis: Critical SSRF & Code Injection Actively Exploited

Two zero-day flaws (CVE-2026-15409, CVE-2026-15410) in SonicWall SMA1000 appliances are being weaponised in the wild. The SSRF bug scores a perfect 10.0 CVSS, while the code-injection flaw rates 7.2, prompting urgent hotfixes and CISA KEV alerts.

SonicWallZero-DaySSRFCode Injection
newsJul 15, 20268 min read

Microsoft July 2026 Patch Tuesday Breaks Records: 622 Fixes, 2 Active Zero-Days

Microsoft’s July 2026 Patch Tuesday delivered a historic 622 vulnerability fixes, far exceeding any prior month. Two zero-days - CVE-2026-56155 (AD FS) and CVE-2026-56164 (SharePoint) - were actively exploited, and a critical VM-escape (CVE-2026-57092) threatens hyper-visors.

MicrosoftPatch TuesdayZero-DayVulnerability Management
newsJul 14, 20268 min read

Ubiquiti Deploys Critical Patches for UniFi Suite - CVE-2026 Flaws Fixed

Ubiquiti has released emergency updates for UniFi Connect, Talk, Access, Protect, and UniFi OS, addressing four critical CVEs (CVE-2026-55115, CVE-2026-54402, CVE-2026-50746, CVE-2026-50747) with CVSS scores up to 10.0. The flaws enable SSRF, unauthenticated command injection, and authenticated SQL injection, posing severe risk to enterprise and ISP deployments.

UbiquitiUniFiCVESecurity Patch
newsJul 13, 20268 min read

RoguePlanet Zero-Day (CVE-2026-50656) Patched: Critical Defender Privilege-Escalation Fixed

Microsoft released an out-of-band update on July 9, 2026 that patches the RoguePlanet race-condition in mpengine.dll (CVE-2026-50656). The flaw let a low-privileged user spawn a SYSTEM-level command prompt, and a public PoC showed 100 % success on vulnerable machines.

Microsoft DefenderZero-DayPrivilege EscalationPatch

contact

Feel free to reach out for collaboration, security consulting, or just to say hello.

[email protected]