Skip to content
Josh Fridey Author Background

 

My name is Josh Fridey and I’m an IT Manager with 15 plus years in the field. At AB Computer, I help teams in agriculture, healthcare, construction, and petroleum run dependable, well structured systems that make work easier. I spend most days working with Microsoft 365, Azure, and Entra. I design and maintain network infrastructure, manage identity, and strengthen cybersecurity so people can do their jobs without fighting their tools. I grew up in the MySpace era. I knew basic HTML and CSS, and customizing my profile was a big part of who I was. This site brings that spirit back, mixing personal flair and a little punk rock with clean, functional, semi professional design. I keep learning, test safely, document clearly, and share what works. Here you will find hands on IT notes, clear checklists, and scripts you can put to work quickly... Click to Read More

Josh Fridey

Josh Fridey, IT ManagerHands-on IT notes, scripts, and walkthroughs

I Found a RCE Attack

I Found a Remote Code Execution Attack on My Next.js Site

I was working in VS Code when Git showed an untracked file in my project: ./upload-d1337.php That stopped me immediately. This is a Next.js app running on Node.js. There should never be a PHP file in the root of the project. I opened it and found a full PHP webshell. A webshell is a backdoor. If someone can access it, they can run commands on your server, browse files, and upload more malicious code. Now this was incident response. How It Happened The first shell was sitting at the project root. After that, I searched the entire directory for *.php files and found another copy here: ./.next/static/chunks/upload-d1337.php That folder is generated during the Next.js build process. It should only con... Read More!Feb 23rd 2026Security
Scratch Contact Us

You can contact my best friend and food provider with this form. Suggestions, corrections, and questions are always welcome! Please also message me French fries...

Scratch