docs: add binary audit and reverse engineering reports with supporting screenshots and fuzzing scripts

هذا الالتزام موجود في:
2026-08-23 17:42:15 +03:00
الأصل 13f849cb23
التزام e823358715
10 ملفات معدلة مع 1285 إضافات و2 حذوفات

عرض الملف

@@ -2,7 +2,7 @@
BIN="/root/ghaymah-v2-test/gy-linux-amd64"
echo "=== Starting CLI Flag Fuzzing Audit ==="
COMMANDS="deploy config login list logs tunnel info delete"
COMMANDS="deploy config login list logs tunnel info delete version whoami"
FLAGS="--file --json --debug --no-auto-update"
TESTS=0
@@ -12,7 +12,7 @@ for cmd in $COMMANDS; do
for flag in $FLAGS; do
for p in ";id" "&&ls" "|cat /etc/passwd" '$(whoami)' "NULL_BYTE_\x00" "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"; do
TESTS=$((TESTS + 1))
OUT=$($BIN $cmd $flag "$p" 2>&1)
OUT=$(timeout 2 $BIN $cmd $flag "$p" --no-auto-update 2>&1)
if echo "$OUT" | grep -qiE "(panic|runtime error|segmentation fault|nil pointer)"; then
echo "[CRITICAL PANIC DETECTED] gy $cmd $flag '$p'"
echo "Output snippet: $(echo "$OUT" | head -n 3)"