docs: add binary audit and reverse engineering reports with supporting screenshots and fuzzing scripts
هذا الالتزام موجود في:
@@ -2,7 +2,7 @@
|
||||
BIN="/root/ghaymah-v2-test/gy-linux-amd64"
|
||||
echo "=== Starting CLI Flag Fuzzing Audit ==="
|
||||
|
||||
COMMANDS="deploy config login list logs tunnel info delete"
|
||||
COMMANDS="deploy config login list logs tunnel info delete version whoami"
|
||||
FLAGS="--file --json --debug --no-auto-update"
|
||||
|
||||
TESTS=0
|
||||
@@ -12,7 +12,7 @@ for cmd in $COMMANDS; do
|
||||
for flag in $FLAGS; do
|
||||
for p in ";id" "&&ls" "|cat /etc/passwd" '$(whoami)' "NULL_BYTE_\x00" "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"; do
|
||||
TESTS=$((TESTS + 1))
|
||||
OUT=$($BIN $cmd $flag "$p" 2>&1)
|
||||
OUT=$(timeout 2 $BIN $cmd $flag "$p" --no-auto-update 2>&1)
|
||||
if echo "$OUT" | grep -qiE "(panic|runtime error|segmentation fault|nil pointer)"; then
|
||||
echo "[CRITICAL PANIC DETECTED] gy $cmd $flag '$p'"
|
||||
echo "Output snippet: $(echo "$OUT" | head -n 3)"
|
||||
|
||||
المرجع في مشكلة جديدة
حظر مستخدم