Benjamin Marr

Security Engineer
Benjamin Marr is a Security Engineer at Intruder with a history of development and penetration testing. In his current role, he automates security scanning and performs research to hunt down complex web application vulnerabilities.

Benjamin Marr

's Posts

Clear all filters
php2shell: Critical PHP RCE (CVE-2026-109618 & CVE-2026-109619)

php2shell: Critical PHP RCE (CVE-2026-109618 & CVE-2026-109619)

php2shell (CVE-2026-109618, CVE-2026-109619) is a pair of unauthenticated RCE flaws in PHP 5.4–8.5. What’s affected, which versions fix it, and what to do.
Benjamin Marr
|
min read
October 22, 2026
|
min read
Vulnerabilities and Threats
What is wp2shell and what can it teach us about vulnerability management?

What is wp2shell and what can it teach us about vulnerability management?

When wp2shell hit WordPress Core, no single check was enough. A look at how a WAF rule can make vulnerable servers appear patched, and why we shipped three checks instead of one.
Benjamin Marr
|
min read
July 21, 2026
|
min read
Clawdbot (Moltbot): When "Easy AI" Becomes a Security Nightmare

Clawdbot (Moltbot): When "Easy AI" Becomes a Security Nightmare

A developing security situation involving Clawdbot (recently rebranded as Moltbot) - an open-source, self-hosted AI assistant.
Benjamin Marr
|
min read
January 27, 2026
|
min read
Vulnerabilities and Threats
What is the OpenSSH regreSSHion vulnerability (CVE-2024-6387)?

What is the OpenSSH regreSSHion vulnerability (CVE-2024-6387)?

Get the latest on the OpenSSH regreSSHion vulnerability (CVE-2024-6387). Intruder's Security team explain what it is, its potential impact, and what action you need to take.
Benjamin Marr
|
min read
July 2, 2024
|
min read
Vulnerabilities and Threats
Progress MOVEit Vulnerability (CVE-2024-5806): All You Need To Know

Progress MOVEit Vulnerability (CVE-2024-5806): All You Need To Know

Get the latest on the Progress MOVEit vulnerability (CVE-2024-5806). Intruder's Security Team explain what it is and what action you can take.
Benjamin Marr
|
min read
June 26, 2024
|
min read
Vulnerabilities and Threats
CVE-2024-24919: Check Point Security Gateways Vulnerability Explained

CVE-2024-24919: Check Point Security Gateways Vulnerability Explained

Find out all you need to know about the Check Point Security Gateways vulnerability (CVE-2024-24919): what is it, which systems are at risk, and how can Intruder help?
Benjamin Marr
|
min read
May 30, 2024
|
min read
Vulnerabilities and Threats
CVE-2024-3400: What is the Palo Alto GlobalProtect vulnerability?

CVE-2024-3400: What is the Palo Alto GlobalProtect vulnerability?

Get the latest on the Palo Alto GlobalProtect vulnerability (CVE-2024-3400), including how Intruder's Attack Surface view can help you check for it.
Benjamin Marr
|
min read
April 16, 2024
|
min read
Vulnerabilities and Threats
Is the XZ Utils CVE-2024-3094 as bad as we fear?

Is the XZ Utils CVE-2024-3094 as bad as we fear?

Find out everything you need to know about the xz-utils vulnerability (CVE-2024-3094) and what you should do if your systems are at risk.
Benjamin Marr
|
min read
April 3, 2024
|
min read
Vulnerabilities and Threats
How Serious Is The Curl [CVE-2023-38545] Vulnerability?

How Serious Is The Curl [CVE-2023-38545] Vulnerability?

Intruder's security expert explains what the curl vulnerability is, whether you should be concerned about it, and how to identify and fix it.
Benjamin Marr
|
min read
October 11, 2023
|
min read
Vulnerabilities and Threats
Security Update: OpenSSL High Vulnerability (CVE-2022-3602)

Security Update: OpenSSL High Vulnerability (CVE-2022-3602)

The OpenSSL project has pre-announced a new and critical vulnerability that will be fixed in OpenSSL version 3.0.7, expected 1 November 2022. Updates to this announcement will ...
Benjamin Marr
|
min read
November 1, 2022
|
min read
Vulnerabilities and Threats
Spring4Shell [CVE-2022-22965]: All you need to know

Spring4Shell [CVE-2022-22965]: All you need to know

Spring4Shell is a critical vulnerability (CVSSv3 9.8) targetting Java’s most popular framework, Spring, and was disclosed on 31 March ...
Benjamin Marr
|
min read
April 5, 2022
|
min read
Vulnerabilities and Threats
No results found
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Benjamin Marr

's Researches

How exploitable is PHP2Shell? - A practical attack chain against PAN-OS

A hands-on walkthrough of exploiting PHP2Shell on PAN-OS, from memory disclosure to code execution, and where nginx blocked the remote attack.
Benjamin Marr
|
October 30, 2026

From enterprise chatbots to gooner caves: exposed AI infrastructure is rampant

We scanned 1 million AI services and found widespread misconfigurations, exposed credentials, and unauthenticated APIs. AI infrastructure security is falling dangerously behind.
Benjamin Marr
|
March 27, 2026

Secrets in your Bundle(.js) - The Gift Attackers Always Wanted

Our scan of 5M apps uncovered 42k+ tokens in JavaScript bundles, from code repo tokens to project management API keys. Learn why traditional scanners miss them, and how Intruder’s new secrets detection method catches what others can’t.
Benjamin Marr
|
December 11, 2025

How We’re Using AI to Write Vulnerability Checks (and Where It Falls Short)

Intruder’s security team is experimenting with agentic AI to accelerate vulnerability checks. Discover what’s working, what isn’t, and why AI isn’t the silver bullet it’s made out to be.
Benjamin Marr
|
September 11, 2025

Shadow IT Isn’t Invisible - It’s Expanding Your Attack Surface. Here’s Proof

Intruder’s security team used CT log queries to find millions of exposed hosts - then found a wide range of Shadow IT exposures attackers can exploit. See real-world Shadow IT risks and what they mean for your attack surface.
Benjamin Marr
|
August 20, 2025

Continuous security for your entire estate

Start today