Patrowl Lab
Research from the lab
Technical research from the Patrowl Lab: vulnerability deep dives, exploitation analysis reproduced in our lab, and what to do about it.
CVEPHPPatching
PHP2Shell: Scary Name, Hard Exploit, Slow Patching
What a PHP core RCE looked like from the detection side: how we narrowed things down, what the patch curve looked like, and a few lessons along the way.
·15 min read2 CVEs
CVEPHPRCE
PHP2Shell: 2 Critical RCE Flaws in PHP (CVSS 9.2)
Unauthenticated code execution demonstrated on WordPress, Drupal and Joomla, and reproduced in our lab. Patched versions and steps to take today.
·9 min read2 CVEs