WordPress

6 posts

/php2shell-critical-php-rce/php2shell-critical-php-rce.png
PHP2Shell Flaw Leaves Millions of Websites Open to Takeover

October 21, 2026

More than 22 million PHP installations sat exposed online this week, facing two flaws that need no password. The details leaked before a patch existed. Updating …

/wordpress-sc-backdoor-rebuilds-itself/wordpress-sc-backdoor-rebuilds-itself.png
WordPress Backdoor Rebuilds Itself Seconds After You Delete It and Takes Its Orders From Ethereum

October 7, 2026

A WordPress backdoor was deleted and came back within seconds. Deleted again, back again. It lived in at least 8 places, the server’s memory too, and had …

/wordpress-wp2shell-rce/wordpress-wp2shell-rce.png
WordPress Let One Request Read Your Database for 227 Days

July 18, 2026

A hole in WordPress handed your database to someone who never logged in. For 227 days it took one request. It needed no password and no plugin, just an address …

/optinmonster-supply-chain-backdoor/optinmonster-supply-chain-backdoor.png
OptinMonster Supply Chain Attack Hits 1.2 Million WordPress Sites

June 16, 2026

1.2 million WordPress sites were caught in a supply chain attack last week, where the admin’s own login quietly created a secret account and planted a …

/hfish-a-honeypot-platform/featured-image.png
Hfish a Honeypot Platform

May 31, 2020

HFish Honeypot In this article and video, I show you how to set up the HFish Honeypot in a few different ways and show you what you can do with it. HFish It is …

/tentacle-a-poc-vulnerability-verification-and-exploit-framework/featured-image.png
Tentacle a Poc Vulnerability Verification and Exploit Framework

April 5, 2020

Tentacle is a POC vulnerability verification and exploits framework. It supports a free extension of exploits and uses POC scripts. It supports calls to …