βββββββ βββββββ βββββββ ββββββββββββββββββββ ββββββββββββββ βββ
ββββββββββββββββββββββββββββββββββββββββββββββ ββββββββββββββ βββ
βββββββββββ ββββββ βββ βββ ββββββββββββββββββββββ βββ βββ
βββββββββββ ββββββ βββ βββ ββββββββββββββββββββββ βββ βββ
βββ βββββββββββββββββββββ βββ βββββββββββ βββββββββββββββββββββββββββ
βββ βββ βββββββ βββββββ βββ βββββββββββ βββββββββββββββββββββββββββ
Welcome to RootShell
Hardcore cybersecurity deep dives & breaking security news
Identifying API Rate Limiting Controls: An Introductory Guide
Learn how to discover, interpret, and fingerprint rate-limiting mechanisms in modern APIs. This guide covers common algorithms, header analysis, response codes, enforcement points, and practical tooling.
Introductory Guide to Crafting and Deploying Adversarial Examples Against Deep Learning Models
Learn the fundamentals of adversarial machine learning, from threat models and white-box attacks to black-box queries, transferability, toolkits, and real-world physical attacks. Practical code, defenses, and exercises are included.
Operator Injection in MongoDB: Bypassing Auth with $ne, $gt, $lt
Learn how MongoDB operator injection using $ne, $gt, $lt (and related operators) can bypass naΓ―ve authentication, how to craft payloads, test them, and implement robust defenses.
Advanced SVG XXE Exploitation: Multi-Stage RCE via Rendering Engines
Learn how SVG-based XML external entity attacks can bypass file checks, exfiltrate data, and chain into ImageMagick, librsvg or GD to achieve remote code execution on vulnerable servers.
Certificate Transparency Log Mining 101: Fundamentals and Data Sources
Learn the basics of Certificate Transparency (CT) logs, how to query them via crt.sh, automate extraction with Python, parse results, and correlate with DNS history to spot phishing and typosquatting.
SSRF Port Scanning via Error Messages - Techniques & Automation
Learn how to turn SSRF into a stealthy port scanner by leveraging error messages, timing, and response codes. Covers payload crafting, automated tools, bypass tricks, and enumeration of internal services.
Critical SharePoint RCE CVE-2026-50522 Enables Machine-Key Theft and Persistent Access
A critical deserialization flaw (CVE-2026-50522) in on-premises Microsoft SharePoint Server is being actively exploited. Attackers leverage a public PowerShell PoC to steal SharePoint machine-keys, granting long-term impersonation even after patching.
WP2Shell: GPT-5.6 Auto-Generates Critical WordPress RCE Chain
OpenAI's GPT-5.6 Sol Ultra was prompted to discover and chain two WordPress Core flaws (CVE-2026-63030 and CVE-2026-60137), producing the WP2Shell exploit that enables unauthenticated remote code execution. Active exploitation is already seen in the wild, putting millions of default WordPress sites at critical risk.
SonicWall SMA1000 Zero-Day Crisis: Critical SSRF & Code Injection Actively Exploited
Two zero-day flaws (CVE-2026-15409, CVE-2026-15410) in SonicWall SMA1000 appliances are being weaponised in the wild. The SSRF bug scores a perfect 10.0 CVSS, while the code-injection flaw rates 7.2, prompting urgent hotfixes and CISA KEV alerts.
Microsoft July 2026 Patch Tuesday Breaks Records: 622 Fixes, 2 Active Zero-Days
Microsoftβs July 2026 Patch Tuesday delivered a historic 622 vulnerability fixes, far exceeding any prior month. Two zero-days - CVE-2026-56155 (ADβ―FS) and CVE-2026-56164 (SharePoint) - were actively exploited, and a critical VM-escape (CVE-2026-57092) threatens hyper-visors.
Ubiquiti Deploys Critical Patches for UniFi Suite - CVE-2026 Flaws Fixed
Ubiquiti has released emergency updates for UniFi Connect, Talk, Access, Protect, and UniFi OS, addressing four critical CVEs (CVE-2026-55115, CVE-2026-54402, CVE-2026-50746, CVE-2026-50747) with CVSS scores up to 10.0. The flaws enable SSRF, unauthenticated command injection, and authenticated SQL injection, posing severe risk to enterprise and ISP deployments.
RoguePlanet Zero-Day (CVE-2026-50656) Patched: Critical Defender Privilege-Escalation Fixed
Microsoft released an out-of-band update on Julyβ―9,β―2026 that patches the RoguePlanet race-condition in mpengine.dll (CVE-2026-50656). The flaw let a low-privileged user spawn a SYSTEM-level command prompt, and a public PoC showed 100β―% success on vulnerable machines.
Support RootShell
Help keep this blog growing and maintained
β€οΈ Sponsor MeSupport on GitHub Sponsors
What your sponsorship helps with:
- β‘ Server hosting and maintenance
- β‘ Publishing new security research and CVE analysis
- β‘ Building and maintaining open-source tools
- β‘ Community support and development
Thank you for supporting open-source cybersecurity! π
contact
Feel free to reach out for collaboration, security consulting, or just to say hello.
[email protected]