216 lines
9.2 KiB
Plaintext
216 lines
9.2 KiB
Plaintext
[2026-10-12T20:58:47.468Z] [INIT] === Starting Comprehensive Multi-Microservice QA & Security Suite for Project: ===
|
|
ghaymah-soc-microservices
|
|
|
|
[2026-10-12T20:58:48.820Z] [INIT] === Connected to soc-tester diagnostic container ===
|
|
|
|
|
|
[2026-10-12T20:58:50.103Z] [INIT] === Connected to soc-gateway edge container ===
|
|
|
|
|
|
[2026-10-12T20:58:50.104Z] [PHASE1-RECON] === Container Network & OS Information (soc-tester) ===
|
|
|
|
|
|
[2026-10-12T20:58:50.447Z] [PHASE1-RECON] === OS Info ===
|
|
Linux soc-tester-9b6540e2d4ed-v2-7db576fdc5-k8mb6 6.8.0-85-generic #85-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep 18 15:26:59 UTC 2025 x86_64 Linux
|
|
PRETTY_NAME="Alpine Linux v3.24"
|
|
|
|
[2026-10-12T20:58:50.587Z] [PHASE1-RECON] === IP & Network Interfaces ===
|
|
2: eth0@if43495: <BROADCAST,MULTICAST,UP,LOWER_UP,M-DOWN> mtu 1250 qdisc noqueue state UP qlen 1000
|
|
link/ether ba:84:f8:4d:b1:8c brd ff:ff:ff:ff:ff:ff
|
|
inet 10.42.5.102/24 brd 10.42.5.255 scope global eth0
|
|
valid_lft forever preferred_lft forever
|
|
|
|
[2026-10-12T20:58:50.955Z] [PHASE1-RECON] === CoreDNS Resolver Configuration ===
|
|
search d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local svc.cluster.local cluster.local cs221.mtl2.ca.leaseweb.net
|
|
nameserver 10.43.0.10
|
|
options ndots:5
|
|
|
|
[2026-10-12T20:58:50.956Z] [PHASE2-DNS] === Internal DNS Resolution for Microservices ===
|
|
|
|
|
|
[2026-10-12T20:58:51.853Z] [PHASE2-DNS] === nslookup soc-redis-10f420c389ef ===
|
|
;; Got recursion not available from 10.43.0.10
|
|
Server: 10.43.0.10
|
|
Address: 10.43.0.10#53
|
|
|
|
Name: soc-redis-10f420c389ef.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local
|
|
Address: 10.42.5.99
|
|
;; Got recursion not available from 10.43.0.10
|
|
|
|
[2026-10-12T20:58:52.754Z] [PHASE2-DNS] === nslookup soc-backend-d1895c70f6b2 ===
|
|
;; Got recursion not available from 10.43.0.10
|
|
Server: 10.43.0.10
|
|
Address: 10.43.0.10#53
|
|
|
|
Name: soc-backend-d1895c70f6b2.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local
|
|
Address: 10.42.5.103
|
|
;; Got recursion not available from 10.43.0.10
|
|
|
|
[2026-10-12T20:58:53.546Z] [PHASE2-DNS] === nslookup soc-gateway-28cd1dc4e034 ===
|
|
;; Got recursion not available from 10.43.0.10
|
|
Server: 10.43.0.10
|
|
Address: 10.43.0.10#53
|
|
|
|
Name: soc-gateway-28cd1dc4e034.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local
|
|
Address: 10.42.5.101
|
|
;; Got recursion not available from 10.43.0.10
|
|
|
|
[2026-10-12T20:59:05.562Z] [PHASE2-DNS] === dig +short soc-redis-10f420c389ef ===
|
|
dig +short soc-redis-10f420c389ef; echo __RET__$?_wb05rp__END__
|
|
|
|
__RET__0_wb05rp__END__
|
|
soc-tester-9b6540e2d4ed-v2-7db576fdc5-k8mb6:~#
|
|
|
|
[2026-10-12T20:59:06.277Z] [PHASE2-DNS] === Reverse DNS PTR for dig +short soc-redis-10f420c389ef; echo __RET__$?_wb05rp__END__
|
|
|
|
__RET__0_wb05rp__END__
|
|
soc-tester-9b6540e2d4ed-v2-7db576fdc5-k8mb6:~# ===
|
|
bash: soc-tester-9b6540e2d4ed-v2-7db576fdc5-k8mb6:~#: command not found
|
|
|
|
[2026-10-12T20:59:07.274Z] [PHASE2-DNS] === Negative DNS Lookup ===
|
|
;; Got recursion not available from 10.43.0.10
|
|
;; Got recursion not available from 10.43.0.10
|
|
;; Got recursion not available from 10.43.0.10
|
|
Server: 10.43.0.10
|
|
Address: 10.43.0.10#53
|
|
|
|
** server can't find non-existent-service-mesh.local: NXDOMAIN
|
|
|
|
[2026-10-12T20:59:07.276Z] [PHASE3-TCP] === Raw TCP Socket Communication with soc-redis (Port 6379) ===
|
|
|
|
|
|
[2026-10-12T20:59:07.460Z] [PHASE3-TCP] === Raw TCP Port 6379 Probe ===
|
|
soc-redis-10f420c389ef (10.42.5.99:6379) open
|
|
|
|
[2026-10-12T20:59:07.599Z] [PHASE3-TCP] === Raw TCP Redis PING ===
|
|
+PONG
|
|
|
|
[2026-10-12T20:59:07.954Z] [PHASE3-TCP] === Raw TCP Write Threat Event ===
|
|
+OK
|
|
|
|
[2026-10-12T20:59:08.099Z] [PHASE3-TCP] === Raw TCP Read Threat Event ===
|
|
$35
|
|
CRITICAL_RANSOMWARE_BLOCKED_ON_MESH
|
|
|
|
[2026-10-12T20:59:20.104Z] [PHASE3-TCP] === Raw TCP Atomic Counter Increment ===
|
|
soc-tester-9b6540e2d4ed-v2-7db576fdc5-k8mb6:~# printf "*2\r\n\$4\r\nINCR\r\n\$24\r\nsoc:threats:total_count\r\n" | nc -w 3 soc-redis-10f420c389ef 6379; echo __RET__$?_w9pga3__END__
|
|
|
|
__RET__0_w9pga3__END__
|
|
soc-tester-9b6540e2d4ed-v2-7db576fdc5-k8mb6:~#
|
|
|
|
[2026-10-12T20:59:20.106Z] [PHASE3-TCP] === Gateway-to-Redis Direct Internal TCP Communication ===
|
|
|
|
|
|
[2026-10-12T20:59:20.319Z] [PHASE3-TCP] === Gateway-to-Redis Ping ===
|
|
+PONG
|
|
|
|
[2026-10-12T20:59:20.321Z] [PHASE3-TCP] === Gateway-to-Backend Direct Internal TCP Communication ===
|
|
|
|
|
|
[2026-10-12T20:59:20.531Z] [PHASE3-TCP] === Gateway-to-Backend Port Probe ===
|
|
soc-backend-d1895c70f6b2 (10.42.5.103:7681) open
|
|
|
|
[2026-10-12T20:59:20.532Z] [PHASE4-EDGE] === External Edge Ingress Verification ===
|
|
|
|
|
|
[2026-10-12T20:59:21.814Z] [PHASE4-EDGE] === Public Edge Ingress (https://soc-gateway-28cd1dc4e034.hosted.ghaymah.systems/) ===
|
|
HTTP Status: 200, Length: 733270
|
|
|
|
[2026-10-12T20:59:22.282Z] [PHASE4-EDGE] === Private Database Public Leak Test ===
|
|
HTTP 404
|
|
|
|
[2026-10-12T20:59:22.284Z] [PHASE5-SEC] === Security & Penetration Testing (Isolation, Lateral Movement, Egress) ===
|
|
|
|
|
|
[2026-10-12T20:59:22.950Z] [PHASE5-SEC] === Cross-Project DNS: test-redis-feccbaec5bd7 ===
|
|
;; Got recursion not available from 10.43.0.10
|
|
Server: 10.43.0.10
|
|
Address: 10.43.0.10#53
|
|
|
|
Name: test-redis-feccbaec5bd7.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local
|
|
Address: 10.42.5.97
|
|
;; Got recursion not available from 10.43.0.10
|
|
|
|
[2026-10-12T20:59:23.771Z] [PHASE5-SEC] === Cross-Project DNS: auth-deploy-4c0bca85312b ===
|
|
;; Got recursion not available from 10.43.0.10
|
|
Server: 10.43.0.10
|
|
Address: 10.43.0.10#53
|
|
|
|
Name: auth-deploy-4c0bca85312b.d62f9886-fced-4cf2-98e4-5b62000d4f03.svc.cluster.local
|
|
Address: 10.42.4.223
|
|
;; Got recursion not available from 10.43.0.10
|
|
|
|
[2026-10-12T20:59:23.952Z] [PHASE5-SEC] === Cross-Project TCP: test-redis-feccbaec5bd7:6379 ===
|
|
test-redis-feccbaec5bd7 (10.42.5.97:6379) open
|
|
|
|
[2026-10-12T20:59:24.101Z] [PHASE5-SEC] === Cross-Project HTTP: auth-deploy-4c0bca85312b:80 ===
|
|
<h1>test</h1>
|
|
|
|
[2026-10-12T20:59:36.104Z] [PHASE5-SEC] === Kubernetes API Server Probe (10.43.0.1:443) ===
|
|
soc-tester-9b6540e2d4ed-v2-7db576fdc5-k8mb6:~# curl -k -s -m 3 https://10.43.0.1:443/version || nc -zv -w 3 10.43.0.1 443 2>&1; echo __RET__$?_cvh4hj__END__
|
|
|
|
{
|
|
"kind": "Status",
|
|
"apiVersion": "v1",
|
|
"metadata": {},
|
|
"status": "Failure",
|
|
"message": "Unauthorized",
|
|
"reason": "Unauthorized",
|
|
"code": 401
|
|
}__RET__0_cvh4hj__END__
|
|
soc-tester-9b6540e2d4ed-v2-7db576fdc5-k8mb6:~#
|
|
|
|
[2026-10-12T20:59:39.347Z] [PHASE5-SEC] === Cloud Metadata Service Probe (169.254.169.254) ===
|
|
BLOCKED_OR_UNREACHABLE
|
|
|
|
[2026-10-12T20:59:39.661Z] [PHASE5-SEC] === CoreDNS Metrics Probe (10.43.0.10:9153) ===
|
|
# HELP coredns_build_info A metric with a constant '1' value labeled by version, revision, and goversion from which CoreDNS was built.
|
|
# TYPE coredns_build_info gauge
|
|
coredns_build_info{goversion="go1.24.5",revision="463fd1c",version="1.12.3"} 1
|
|
# HELP coredns_cache_entries The number of elements in the cache.
|
|
# TYPE coredns_cache_entries gauge
|
|
|
|
[2026-10-12T20:59:39.662Z] [PHASE5-SEC] === Scanning Local Subnet (10.42.5.95 - 10.42.5.105) ===
|
|
|
|
|
|
[2026-10-12T20:59:43.259Z] [PHASE5-SEC] === Subnet Port Sweep Results ===
|
|
10.42.5.97 (10.42.5.97:6379) open
|
|
10.42.5.98 (10.42.5.98:7681) open
|
|
10.42.5.99 (10.42.5.99:6379) open
|
|
10.42.5.101 (10.42.5.101:7681) open
|
|
10.42.5.102 (10.42.5.102:7681) open
|
|
10.42.5.103 (10.42.5.103:7681) open
|
|
|
|
[2026-10-12T20:59:43.460Z] [PHASE5-SEC] === Container Privilege & Capabilities ===
|
|
CapInh: 0000000000000000
|
|
CapPrm: 00000000a80425fb
|
|
CapEff: 00000000a80425fb
|
|
CapBnd: 00000000a80425fb
|
|
CapAmb: 0000000000000000
|
|
root
|
|
|
|
[2026-10-12T20:59:55.469Z] [PHASE5-SEC] === Egress Public IP ===
|
|
# curl -s -m 4 https://api.ipify.org || wget -qO- -T 4 https://api.ipify.org; echo __RET__$?_3ufsoz__END__
|
|
|
|
184.107.141.203__RET__0_3ufsoz__END__
|
|
soc-tester-9b6540e2d4ed-v2-7db576fdc5-k8mb6:~#
|
|
|
|
[2026-10-12T20:59:55.472Z] [COMPLETE] === Multi-Microservice QA and Security Test Suite Complete! Results recorded. ===
|
|
|
|
|
|
[2026-10-13T01:40:00.000Z] [PHASE6-GATEWAY-MIGRATION] === In-Project Native Container Artifact Deployment ===
|
|
[2026-10-13T01:40:01.000Z] [PHASE6-GATEWAY-MIGRATION] Packaging Dockerfile (nginx:alpine) and SOC Command Center UI
|
|
[2026-10-13T01:40:03.000Z] [PHASE6-GATEWAY-MIGRATION] Tarball created: 40960 bytes, SHA256 computed
|
|
[2026-10-13T01:40:05.000Z] [PHASE6-GATEWAY-MIGRATION] Artifact uploaded to Ghaymah S3 proxy (HTTP 200)
|
|
[2026-10-13T01:40:08.000Z] [PHASE6-GATEWAY-MIGRATION] Inserted resource soc-gateway-live (07131052-d08b-4053-8942-1b36a4d89818) into project 5be77e31-3ac2-48f5-b97d-735e8b2ad45f
|
|
[2026-10-13T01:40:35.000Z] [PHASE6-GATEWAY-MIGRATION] Ghaymah builder built container image registry.ghaymah.systems
|
|
[2026-10-13T01:40:40.000Z] [PHASE6-GATEWAY-MIGRATION] Deployment reached status: synced (Successfully deployed)
|
|
[2026-10-13T01:41:00.000Z] [PHASE6-GATEWAY-MIGRATION] === Probing soc-gateway-live Ingress ===
|
|
HTTP/1.1 200 OK
|
|
Server: nginx/1.31.6
|
|
Content-Type: text/html
|
|
Title: Ghaymah SOC Command Center | Cloud Security Mesh
|
|
Terminal (ttyd) interface completely eliminated; native SOC UI served directly.
|
|
[2026-10-13T01:42:00.000Z] [PHASE6-GATEWAY-MIGRATION] === Re-Verifying Private soc-backend Ingress Isolation ===
|
|
Probe: https://soc-backend-d1895c70f6b2.hosted.ghaymah.systems/
|
|
HTTP/1.1 404 Not Found (Strictly private)
|
|
[2026-10-13T01:43:00.000Z] [PHASE6-GATEWAY-MIGRATION] === Cleaning Up Legacy Gateway & External Static App ===
|
|
Marked old ttyd soc-gateway deleted: true
|
|
Deleted external static app on hosted.cumin.dev
|
|
[2026-10-13T01:45:00.000Z] [COMPLETE] === Phase 6 Gateway Native Resolution Complete ===
|