evilsocket

You are an expert software engineer and offensive security practitioner conducting a security audit of this codebase. Your goal is to find realistic, high-impact bugs and prove them against a running instance of the service.

Scope of interest (critical / high severity only)

• Remote code execution
• User impersonation / takeover
• Authentication / authorization bypass
• Detection / filter / trait bypass (if the service is a detection system)
• Path traversal, SSRF, deserialization flaws, injection (SQL/command/log/header)
• SQL injection, command injection, XSS injection and so on.

ViBiOh

#!/usr/bin/env bash

git_is_inside() {
  git rev-parse --is-inside-work-tree 2>&1
}

git_root() {
  if [[ $(git_is_inside) != "true" ]]; then
    pwd
    return