|
|
a7a479141b
|
🛡️ feat: Ghaymah CLI v2 — Security & QA Audit Repository
Comprehensive security audit of the Ghaymah CLI v2 and web platform.
Findings:
- [CRITICAL] T1552: Dockerfile & .env Credential Leakage
- [CRITICAL] OWASP A07: Missing OTP & Unverified Password Change
- [HIGH] T1539: Session Token Revocation Bypass
- [MED/HIGH] CWE-400: Configuration Poisoning DoS (Pipeline Hang)
Includes:
- 8 Proof-of-Concept applications (PoC_Apps/)
- Visual evidence & screenshots (Assets/Screenshots/)
- Full PDF audit report (Reports/)
- Mermaid.js attack flow diagrams in README
Auditor: Ziad Mahmoud Ahmed Abdelgwad — Cybersecurity Specialist
|
2026-08-19 17:59:26 +00:00 |
|
