PHP2Shell: Investigating PHP 8.4 Memory Corruption Vulnerabilities

A technical exploration of PHP2Shell, focusing on CVE-2026-109618 and CVE-2026-109619, two vulnerabilities associated with PHP session upload progress handling and memory corruption.

The challenge provided an opportunity to examine PHP internals, investigate memory-management behaviour, and understand how these flaws could potentially lead to remote code execution.

The research also covered GDB-based debugging, Apache request handling, memory analysis, and the security implications of dangling session pointers.

Finally, the write-up examines PHP security updates and temporary mitigation measures, highlighting the importance of keeping PHP runtimes patched and properly configured.

#PHP #PHP2Shell #CVE #MemoryCorruption #CyberSecurity #VulnerabilityResearch #ApplicationSecurity #ExploitAnalysis #GDB #HackTheBox …

Learn MoreDark Embargo — Technical Analysis of a PHP 8.4 Vulnerability

Completed the Hack The Box “Helix” machine, a medium-difficulty Linux challenge focused on Apache NiFi and industrial control systems.

The attack chain involved virtual host discovery, Apache NiFi exploitation, reverse shell access as nifi, recovery of an SSH private key, and lateral movement to the operator user. Privilege escalation was achieved by interacting with the internal OPC UA server and manipulating reactor control values to open the privileged maintenance window, ultimately obtaining root access.

Another great HTB challenge combining web exploitation, credential recovery, Linux privilege escalation, and OT/ICS concepts.

#HackTheBox #HTB #CyberSecurity #PenetrationTesting #OffensiveSecurity #RedTeam #Linux #ApacheNiFi #OPCUA #ICS #OTSecurity #PrivilegeEscalation #CTF …

Learn MoreHack The Box: Helix Machine – Medium Difficulty

Currently working on a deep-dive into a critical Teams guest access behaviour I discovered during testing.
My research shows how attackers can spin up fresh M365 tenants and completely bypass Defender protections by pulling users into external guests.
I’m documenting the attack flow, detection queries, and practical steps organisations can take to reduce exposure — learning a lot along the way.

#CyberSecurity #LearningInPublic #ThreatResearch #RedTeam #BlueTeam #Microsoft365 #Defender #SecurityCommunity …

Learn MoreImpact Assessment: How Guest Access Affects Threat Detection in Office 365

Introduction to Brutus Challange I want to share some tips for approaching the Brutus challenge. Sherlock Scenario on Brutus Brutus is an entry-level DFIR challenge with two artifacts: auth.log and wtmp. The goal is to trace an SSH brute-force attack where the

Continue ReadingHack The Box: Brutus Sherlock Challange – Very Easy Difficulty

Introduction to Meerkat Challange I want to share some tips for approaching the Meerkat challenge. Sherlock Scenario on Meerkat A zip file has been provided, containing a .pcap file that captures network traffic from the timeframe of the suspected compromise. Additionally, a

Continue ReadingHack The Box: Sherlock Meerkat Walkthrough – Easy Difficulty

Case Scenario 1. Analyzing Domain Controller Security Logs, can you confirm the date & time when the kerberoasting activity occurred? 2. What is the Service Name that was targeted? 3.It is really important to identify the Workstation from which this

Continue ReadingHack The Box: Campfire-1 Sherlock Walkthrough – Very Easy Diffcuility

In this post, I would like to share some walkthroughs on the Sherlock Challenges such as LockPick2.0 which can be considered a Hard Difficulty Case Study for LockPick2.0 Challenge Firstly, we need to extract the zip file of lockpick2.0 which provide us with

Continue ReadingHack The Box: LockPick2.0 Sherlock Challenge – Hard Diffculity