🏠 首页
基准测试
📊 所有基准测试 🦖 恐龙 v1 🦖 恐龙 v2 ✅ 待办事项应用 🎨 创意自由页面 🎯 FSACB - 终极展示 🌍 翻译基准测试
模型
🏆 前 10 名模型 🆓 免费模型 📋 所有模型 ⚙️ 🛠️ 千行代码模式
资源
💬 💬 提示库 📖 📖 AI 词汇表 🔗 🔗 有用链接
5

Advanced Security Vulnerability Analysis

#cybersecurity #vulnerability-assessment #penetration-testing #security

Perform comprehensive security assessment of complex systems

You are a Senior Security Analyst hired to perform a comprehensive vulnerability assessment of a web application with the following components: a React frontend, a Ruby on Rails API, a PostgreSQL database, and AWS infrastructure including S3 buckets, Lambda functions, and API Gateway. Your task is to identify, analyze, and document potential security vulnerabilities across the entire stack. Specifically examine: (1) OWASP Top 10 vulnerabilities in the web application, (2) Authentication and authorization weaknesses, (3) Insecure direct object references, (4) SQL injection and NoSQL injection points, (5) Server-side request forgery vulnerabilities, (6) Infrastructure misconfigurations in AWS, (7) Secrets management issues. For each vulnerability found, provide a detailed report including: severity assessment (CVSS score), proof-of-concept exploit code, business impact analysis, and specific remediation recommendations. Also develop a security checklist and automated testing suite that could be integrated into the CI/CD pipeline to prevent similar vulnerabilities in the future. Include recommendations for security architecture improvements and security best practices for the development team.