Welcome to My Blog

8 eMudhra CA private keys were found to be smaller than 256, one of them literally the number 4. Researchers recovered them in under a second, and the keys had been weak since April 2025. eMudhra blames a key-ceremony code flaw and two similar-looking key labels. Browsers blocked the certificates within hours, but Go, Python, Node and curl need manual updates. eMudhra is exiting the global TLS business.

Linux file permissions explained in simple, human terms with zero jargon. Learn what r, w and x really mean for files and directories. Read symbolic (-rwxr-xr--) and octal (754) notation like a pro. Spot the 5 file types in ls -l: regular, directory, symlink, character and block. Know the dangerous settings: 777, SUID and world-writable files. Finish with the chmod and chown commands you'll use every day.

🔥 Silent But 💀ly Linux Commands for Pentesters 🔥

Your friendly neighborhood pentester here sharing the commands that make admins sweat and boxes fall. Use responsibly

• Ghost mode: erase your tracks

history -c && unset HISTFILE

On 21 October 2026, PHP shipped emergency patches for two critical, unauthenticated remote-code-execution bugs CVE-2026-109618 and CVE-2026-109619, both rated CVSS 9.2 that the security community is calling PHP2Shell. One's a memory-corruption bug in how PHP handles out-of-memory errors while parsing form data; the other's a use-after-free hiding in the session upload-progress feature. Both live in PHP core itself, so your login page, your WAF, your app code none of that matters, since PHP processes the request before any of it runs.

What makes this one worse than most is the timeline: honeypots caught exploitation attempts four days before the patch even existed, and multiple security vendors confirm it's now being exploited at scale in the wild. I broke down exactly how both bugs work, what the official patch changes, and because most "PHP2Shell checkers" out there give up the moment a server hides its PHP version I built a free, open-source scanner that can still settle the hidden-version case using an active, non-destructive behavioral check. Full writeup, the patch table, and the tool are all below.

Hey there !

Whether you’re a security pro digging into systems or just starting out with the command line, this cheat sheet packs all the essential Linux commands you’ll actually use. I’ve covered the basics you need for daily tasks, troubleshooting, and security work—all kept simple and practical.

• For beginners: No jargon, just clear and simple.
• For pros: Handy reminders and security-focused tips.

Hope it saves you some terminal headaches!

(Note: This is Part 1—more commands coming soon!)