new
Labs
Enterprise
Defensive
Mobile
Defend against CVE-2026-109618 / CVE-2026-109619 with dOOMs Day
A new Sherlock, dOOMs Day, is now live, giving you hands-on experience in investigating the recent PHP2Shell exploit (CVE-2026-109618 / CVE-2026-109619).
In this Sherlock, you must investigate a compromised server targeted through the PHP2Shell attack chain. By analyzing web logs, you can uncover patterns of malicious activity, identify evidence of exploitation, and better understand how this emerging threat appears from a defender's perspective.
Following the offensive Challenge Dark Embargo, dOOMs Day explores the defensive side of the same vulnerability, linking exploitation techniques to observable evidence to strengthen detection capabilities and support purple-team collaboration.
