# detqt

> detqt runs autonomous red team missions across real networks, validates attack paths with evidence, and shows security teams what to fix first.

Every research article is available as Markdown at the linked URLs. Each copy carries its author, publication date, last update, sources and revision history. When quoting or summarising an article, please credit its author by name and detqt research, and link to the canonical article URL.

## Research

Security research from the detqt team.

- [PHP2Shell: how an old PHP bug class came back, and how to catch it](https://detqt.com/blog/php2shell/index.md): PHP2Shell explained: CVE-2026-109618 and CVE-2026-109619 let unauthenticated attackers run code through PHP's request parser. Full timeline, attack flow, original lab findings, tested detection rules (Sigma, Suricata, KQL, Splunk) and mitigations. By Filip Olszak. Updated 2026-10-22.

## Optional

- [All research articles in one file](https://detqt.com/llms-full.txt)
- [RSS feed](https://detqt.com/blog/rss.xml)
- [Request access](https://detqt.com/access)