An unreadable PHP worker is not a clean result23 October 2026 · Reproduction, upstream fix and follow-up During RELIQUA's package-update comparison, an existing PHP checker reported that no process was running a replaced PHP binary. Three PHP-FPMOct 23 · 4 min readartifexignotvs.hashnode.dev
After the PHP update, what still runs? Introducing RELIQUAA package update has finished. An old worker can still be running. That is the question behind RELIQUA, a new read-only Linux CLI for reviewing PHP2Shell remediation. The first public alpha is availabOct 22 · 3 min readartifexignotvs.hashnode.dev
Access Assurance Lite: checking the application after access removalAn account has been disabled. The administrative request succeeded. The next useful question is whether its existing credential can still reach the application. Access Assurance Lite v0.1.0-alpha.1 isOct 20 · 3 min readartifexignotvs.hashnode.dev
The identity was disabled. Its token still worked.Disabling an account and removing its access are two different events. A controlled laboratory run made the gap visible: the identity provider accepted the disable operation, but the application stillOct 20 · 3 min readartifexignotvs.hashnode.dev
A timeout is not a completed analysis: making Ghidra runs inspectableA parser processing an unfamiliar binary is part of the attack surface. Putting it in a subprocess does not, by itself, hide a home directory, remove network access or constrain every child process. AOct 19 · 3 min readartifexignotvs.hashnode.dev