[FEATURE] Security Audit

[ZacharyZcR]

Title

Security Audit

Platform

Web-app

Is it related to an issue?

It is an honor to witness Termix emerge as a new open-source project. As the project evolves and enhances its capabilities, security concerns have become increasingly urgent. Particularly for a bastion host and credential management platform like Termix, we should conduct defensive security audits. This involves simulating scenarios where attackers have already exploited critical zero-day vulnerabilities, followed by thorough audits and disclosures of the interface layer and authentication logic. Such measures will bolster user confidence in the platform's security.

The Solution

Comprehensively audit and disclose authentication logic; comprehensively audit and disclose attack surfaces.

Additional Context

No response

[P3RF3CTION]

Hi @ZacharyZcR,
I already did some of that part for Version 1.9 and had communication with @LukeGus about this Topic.
Some Fixes have already been implemented in Version 1.10 of known vulnerabilites CVEs.
I am using a Fork which is constantly undergoing Vulnerability Scanning with Snyk and Sonarqube. If you wish the Details just let me know. 😄 🦺
Since that is mostly my job in real live I am happy to help.

[ZacharyZcR]

Hi @ZacharyZcR, I already did some of that part for Version 1.9 and had communication with @LukeGus about this Topic. Some Fixes have already been implemented in Version 1.10 of known vulnerabilites CVEs. I am using a Fork which is constantly undergoing Vulnerability Scanning with Snyk and Sonarqube. If you wish the Details just let me know. 😄 🦺 Since that is mostly my job in real live I am happy to help.

Thank you so much, Max! I'm considering gaining a deeper understanding of our attack surface and enhancing the security and trustworthiness of our products through manual or automated audits. This may require some time or additional effort, so I'll keep this issue open.

[P3RF3CTION]

Hi @ZacharyZcR, I already did some of that part for Version 1.9 and had communication with @LukeGus about this Topic. Some Fixes have already been implemented in Version 1.10 of known vulnerabilites CVEs. I am using a Fork which is constantly undergoing Vulnerability Scanning with Snyk and Sonarqube. If you wish the Details just let me know. 😄 🦺 Since that is mostly my job in real live I am happy to help.

Thank you so much, Max! I'm considering gaining a deeper understanding of our attack surface and enhancing the security and trustworthiness of our products through manual or automated audits. This may require some time or additional effort, so I'll keep this issue open.

Sure, always welcome. The initial OWASP Run was as well acceptable 🗡️ I should maybe double check again with the newer releases.