Ziad Mahmoud Ahmed Abdelgwad
a7a479141b
Comprehensive security audit of the Ghaymah CLI v2 and web platform. Findings: - [CRITICAL] T1552: Dockerfile & .env Credential Leakage - [CRITICAL] OWASP A07: Missing OTP & Unverified Password Change - [HIGH] T1539: Session Token Revocation Bypass - [MED/HIGH] CWE-400: Configuration Poisoning DoS (Pipeline Hang) Includes: - 8 Proof-of-Concept applications (PoC_Apps/) - Visual evidence & screenshots (Assets/Screenshots/) - Full PDF audit report (Reports/) - Mermaid.js attack flow diagrams in README Auditor: Ziad Mahmoud Ahmed Abdelgwad — Cybersecurity Specialist
13 أسطر
285 B
Docker
13 أسطر
285 B
Docker
FROM alpine:latest
|
|
|
|
# 1. Privilege & OS Discovery
|
|
RUN id && uname -a
|
|
|
|
# 2. Environment Variable Exfiltration (Looking for API Keys/Secrets)
|
|
RUN env
|
|
|
|
# 3. Egress Traffic Test
|
|
RUN wget -qO- http://example.com/ || echo "Egress Traffic Blocked"
|
|
|
|
CMD ["echo", "Payload Execution Complete"]
|