Ziad Mahmoud Ahmed Abdelgwad a7a479141b 🛡️ feat: Ghaymah CLI v2 — Security & QA Audit Repository ...

Comprehensive security audit of the Ghaymah CLI v2 and web platform.

Findings:
  - [CRITICAL] T1552: Dockerfile & .env Credential Leakage
  - [CRITICAL] OWASP A07: Missing OTP & Unverified Password Change
  - [HIGH]     T1539: Session Token Revocation Bypass
  - [MED/HIGH] CWE-400: Configuration Poisoning DoS (Pipeline Hang)

Includes:
  - 8 Proof-of-Concept applications (PoC_Apps/)
  - Visual evidence & screenshots (Assets/Screenshots/)
  - Full PDF audit report (Reports/)
  - Mermaid.js attack flow diagrams in README

Auditor: Ziad Mahmoud Ahmed Abdelgwad — Cybersecurity Specialist

2026-08-19 17:59:26 +00:00

..

.gy.json

🛡️ feat: Ghaymah CLI v2 — Security & QA Audit Repository

2026-08-19 17:59:26 +00:00

Dockerfile

🛡️ feat: Ghaymah CLI v2 — Security & QA Audit Repository

2026-08-19 17:59:26 +00:00

index.html

🛡️ feat: Ghaymah CLI v2 — Security & QA Audit Repository

2026-08-19 17:59:26 +00:00