40 lines
1.2 KiB
JSON
40 lines
1.2 KiB
JSON
|
{
|
||
|
|
"schema_version": "whitehat-target/v1",
|
||
|
|
"target_id": "fixture-e3",
|
||
|
|
"posture_claim": "E3",
|
||
|
|
"attacker_model": "E3-A omitted-predicate accident; E3-B documented SQL-compromise limit",
|
||
|
|
"applicability": "applicable",
|
||
|
|
"applicability_reason": "In-process evaluator created by this repository. It uses one ordinary runtime identity and never grants BYPASSRLS or superuser.",
|
||
|
|
"approval_classes": ["fixture-e3"],
|
||
|
|
"adapter": "src/whitehat_security/e3.py",
|
||
|
|
"probe_pack": "src/whitehat_security/e3.py",
|
||
|
|
"known_bad_calibration": "src/whitehat_security/e3.py",
|
||
|
|
"fixture_lifecycle": {
|
||
|
|
"create": "in-process constructor",
|
||
|
|
"delete": "drop process state",
|
||
|
|
"ids_are_synthetic": true
|
||
|
|
},
|
||
|
|
"egress": "in-process",
|
||
|
|
"routes": [
|
||
|
|
"conformance",
|
||
|
|
"unset_guc",
|
||
|
|
"wrong_tenant_read",
|
||
|
|
"wrong_tenant_insert",
|
||
|
|
"runtime_bypassrls",
|
||
|
|
"unsafe_definer",
|
||
|
|
"reset_to_b"
|
||
|
|
],
|
||
|
|
"identities": {
|
||
|
|
"count": 1,
|
||
|
|
"role": "ordinary runtime database role without BYPASSRLS",
|
||
|
|
"ttl_seconds": 900,
|
||
|
|
"broker_audience": "whitehat-e3/fixture"
|
||
|
|
},
|
||
|
|
"abort_telemetry": [
|
||
|
|
"statement_timeout",
|
||
|
|
"unexpected_or_non_fixture_data",
|
||
|
|
"missing_attribution",
|
||
|
|
"privilege_escalation"
|
||
|
|
]
|
||
|
|
}
|