Bryan Porras Blanch

Bryan Porras Blanch

Senior Security Research Engineer

Articles by Bryan Porras Blanch
SOCSecurity OperationsEndpoint Protection & Security

Not another Log4Shell: inside the Log4j 2 deserialization allowlist bypass

We reproduced this java deserialization vulnerability against official Log4j 2.26.1 JARs. Getting to command execution took two more things that Log4j itself does not ship. Here is how the bypass works, which versions carry it, and what to hunt for.

Ruben Groenewoud
Endpoint Protection & Security

wp2shell hits WordPress: detecting pre-auth RCE from plugin drop to command execution

We ran the wp2shell WordPress RCE chain end-to-end with Elastic Defend. Detection rule walkthrough, IOCs, and hunt guidance.

Ruben Groenewoud