Category
Attack Surface Management
wp2shell (CVE-2026-63030) is an unauthenticated pre-auth RCE in WordPress Core 6.9.0-6.9.4 and 7.0.0-7.0.1. A plain-English advisory, a ready-to-run Nuclei detection template, remediation, and how…
xer0dayz
·
14 min read
Attack Surface Management
Active reconnaissance explained for 2026 - port scanning, service and technology fingerprinting, screenshots and endpoint discovery - the tools, the scope rules, and how…
xer0dayz
·
10 min read
Attack Surface Management
How to enumerate subdomains in 2026 - passive sources, active brute force and permutation, DNS resolution, virtual hosts and takeover checks - with the…
xer0dayz
·
10 min read
Attack Surface Management
A phased reconnaissance methodology for bug bounty, red team and external attack surface management. Every recon stage from OSINT to reporting - and how…
xer0dayz
·
13 min read
Artificial Intelligence
We’re excited to announce the official release of SILENTCHAIN AI™ Community Edition v1.1.3 — a free, AI-powered Burp Suite extension that brings intelligent vulnerability…
xer0dayz
·
4 min read
Attack Surface Management
Our security research team recently discovered a critical “0day” vulnerability which was assigned CVE-2024-21733. The vulnerability was discovered by xer0dayz from Sn1perSecurity LLC and…
xer0dayz
·
3 min read
Attack Surface Management
In the past few years, we have seen a dramatic increase in the number of tools available to security professionals. This is a direct…
xer0dayz
·
3 min read
Attack Surface Management
If you’re in the security field, you know that there are a lot of moving parts to keep track of. It can be tough…
xer0dayz
·
3 min read
Attack Surface Management
A critical vulnerability affecting the Atlassian Confluence was disclosed and designated CVE-2022-26134 which allows an un-authenticated attacker to execute arbitrary code on vulnerable servers.…
xer0dayz
·
2 min read
Try it free
Sn1per finds, ranks, and exploits real vulnerabilities autonomously — the same way attackers do.