🚨 PHP2Shell detection is now available in Burp Suite Professional & Burp Suite DAST.
Most of the web is powered by PHP, which means most of the web is vulnerable to these critical unauthenticated remote code execution flaws (CVE-2026-109618 / 109619). You can already detect it in Burp Suite using:
🟧 ActiveScan++ v2.0.13 (https://t.co/fkhECQ6wtD)
🟧 Bambda scan checks (https://t.co/PxPcj5uDYX)
🟧 BChecks (https://t.co/i8c8WiDnvb)
Start scanning for the vulnerability now → https://t.co/fkhECQ6wtD
🚨 I am giving away 1 seat each of our June Red team (CRTP) and Azure (CARTP) bootcamps. 🚨
Repost, like and reply to this tweet to participate. I will announce the winners on Monday (27th May).
https://t.co/sKR2ZXihOI
#redteam#pentest#giveaway
In an internal pentest, always keep an eye out for Java-RMI services. Those have several misconfigurations which can lead to RCE, as well as exporting useful functions (addUser, runCMD) which can be called and accessed by the JDK jprofiler tool.
@thecybermentor@TCMSecurity Have watched most of TCM videos and up to date he remains one of the top individuals in the infosec industry who are original , humble and stick to what they believe in. You deserve much love and respect 🙏🙏