27 results for "SQL injection"

wp2shell (weekend to shell edition)

WordPress runs roughly 40% of the internet, so when a routine weekend dig into its REST API turned up a pre-auth path to full database compromise, we didn't get much sleep. In this write-up, we chain a batch-endpoint route confusion bug (CVE-2026-63030) with a SQL injection in WP_Query (CVE-2026-60137) to go from anonymous request to admin account, no cracked hashes required. Read the full article to see how we faked oEmbed cache entries, built a nav_menu_item privilege chain out of seven UNION queries, and landed a webshell without ever logging in.

Author(s)

Published at: 22 Jul 2026

Gabrielle Botbol guest for We think we know

We think we know podcast

We think we know you can't attack what you don't understand

Gabrielle isn't just a pentester; she's a powerhouse of knowledge, an advocate for cyber education, and a mentor shaping the future of ethical hacking. With 9+ years of experience in cybersecurity, she focuses on sharing it with her community members through practical and valuable resources. In this episode, we continue to ask the meaningful questions: What makes a great pentester? How can you balance the art of manual testing with the efficiency of automation? What is the unique value that pentesters bring to offensive security? And what can't be commoditized in this craft?

Author(s)

Published at: 26 Mar 2024

We think we know podcast

We think we know what it takes to build hacking tools

Why would someone spend a lot of their time making penetration testing tools? Especially when it takes what it takes to maintain them. Today on We think we know, we're peeling back the layers of offensive security with the enigmatic Panagiotis Chartas, also known by his alias - Telemachus - a nod to his Greek heritage and the strategic depth of his expertise.

Author(s)

Published at: 27 Feb 2024

Hacking tutorials

Mastering the essentials of API security with examples for OWASP Top 10 for APIs

When you hear about API (Application Programming Interface), do you get anxious because you don’t understand it very well? Do you feel like you can’t keep up with new technology? If you do, you’re not alone! Take a deep breath. Take another. Excellent! I’ll help you overcome your API security FOMO. In this guide, you’ll learn: how APIs work how to exploit the most common API vulnerabilities real-life examples of data breaches caused by API security issues API security best practices, and much more!

Author(s)

Kelyan Yesil

Published at: 09 Feb 2024

We think we know podcast

We think we know what it feels like when we do a good job

To deliver meaningful results as a pentester you have to be both patient and persistent. You have to love the process and strive for results for your clients. You also have to go in-depth and cultivate a broader understanding of all the pieces of the puzzle. Today’s guest, Willa Riggins, talks about how “every small piece contributes to the larger picture” in pentesting and explains why “it's about understanding the intricacies and appreciating the craftsmanship."

Author(s)

Published at: 30 Jan 2024

How ChatGPT impacts offensive security pros work

Community wisdom

Offensive security pros share how ChatGPT impacts their work

Could 2024 be a pivotal moment for AI in offensive security? We know it challenges us to explore new ways to simplify our work, but how will penetration testers use ChatGPT as a tool for meaningful change? And, most importantly, which new advancements in this space are worth keeping an eye on?

Author(s)

Kelyan Yesil

Published at: 17 Jan 2024

Security research

Roundcube: exfiltrating emails with CVE-2021-44026

Have you ever asked yourself: what is the half-life of a disclosed vulnerability? When should we stop worrying about it?

Author(s)

Published at: 22 Dec 2023

Security research

Log4J - why some CVEs (almost) never disappear

Unless you’ve been on a sabbatical for the past year, you probably know how a critical vulnerability known as Log4shell took over the world.

Author(s)

Kelyan Yesil

Published at: 07 Apr 2023

Platform updates

February updates: run deeper, more comprehensive scans

Supporting your ethical hacking engagements is what we do with each new batch of monthly updates we roll out. Here’s how we walk the talk this month.

Author(s)

Ioana Rijnetu

Published at: 16 Mar 2022

Security research

How to detect and exploit Citrix ADC and Citrix Gateway (CVE-2020-8194)

Citrix systems are very popular, even famous, one could say. They even sponsor Formula 1 teams! But despite their notoriety, they use the FreeBSD OS on their devices and plain PHP for web services, so I got easy access to the code and analyzed it.

Author(s)

Catalin Filip

Published at: 10 Mar 2022

Security research

How to exploit a Remote Code Execution vulnerability in Laravel (CVE-2021-3129)

I discovered this vulnerability for the first time in the Horizontall machine from Hack The Box, and the conditions in which it’s triggered pushed me to understand it in more detail. CVE-2021-3129 reminds me about a log poisoning vulnerability, but with a different flavor.

Author(s)

Iulian Tita

Published at: 03 Mar 2022

Milestones

Behind the scenes – an interview with Adrian Furtuna, our founder and CEO

As cybercrime continues to escalate, businesses are increasingly prioritizing their cybersecurity strategies, often embracing penetration testing to address the most burning threats. Although this established practice is highly effective, there are still many necessary improvements to help scale it to the current needs of the tech ecosystem. CyberNews sat down with Adrian Furtuna, our Founder & CEO, to talk about the ins and outs of penetration testing. Here’s why Adrian believes that no matter how advanced the technology is, some aspects still need a human approach.

Author(s)

Ioana Rijnetu

Published at: 16 Feb 2022

Discover our ethical hacking toolkit and all the free tools you can use!

Create free account