2 Commits

Author	SHA1	Message	Date
Dorian	daa33d098b	test: enhance automated pentest suite (PENTEST-01) ... Rewrite verify-pentest-fixes.sh and test-security.sh with comprehensive security tests covering auth bypass, CSRF protection, rate limiting, input validation (SQL injection, command injection, path traversal), session fixation, SSRF, container isolation, and session lifecycle. Both scripts now pass all checks (35/35 and 14/14). Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-11 14:15:53 +00:00
Dorian	5feb4ce799	chore: add pentest verification script and wire into overnight loop ... - scripts/verify-pentest-fixes.sh: 26-check automated verification that tests all 21 pentest findings against the live server - loop/plan.md: add permanent post-fix verification section - scripts/overnight-loop.sh: accept plan file arg, run verification after all fixes complete Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-06 03:50:50 +00:00