Trust Anchor Reconnaissance — BPO Attack Surface Analysis
Abstract
RECONNAISSANCE.md documents the attack surface analysis of build.postmarketos.org infrastructure. Attack Surfaces Analyzed /api/public/update-job-status (CRITICAL - No auth) /api/job-callback/build-package (Token theft risk) /api/job-callback/sign-index (Pre-signed injection) /api/push-hook/gitlab (Webhook forgery) State machine bypass vectors Token theft/reuse patterns Part of the Trust Anchor framework for persistent threat environments.
Fields of Study & Subjects
Web Application Security Vulnerabilities
Security and Verification in Computing
Information and Cyber Security
Publication details
- Journal / source
- Zenodo (CERN European Organization for Nuclear Research)
- Publication date
- 10 January 2026