Blog
Research, technical analysis and field notes from DeepLook Labs.
"php2shell — Pre-Auth RCE in PHP mod_php"
Technical analysis of CVE-2026-109618 and CVE-2026-109619 — two critical vulnerabilities in PHP mod_php that, when chained, allow pre-authentication remote code execution via Use-After-Free in the Zend Engine and dangling session globals.
Read post →PTaaS by the numbers: what we find when we never stop looking
The real numbers behind our Continuous Pentest (PTaaS) through Deep Argus — hundreds of cycles, over a thousand validated exposures, and an honest picture of risk by severity and by class, with charts.
Read post →Triggering Authentication Dialogs Inside Sandboxed Iframes
An unexpected behavior in sandboxed iframes — triggering modal browser authentication dialogs without allow-popups, as long as allow-scripts is present.
Read post →