Create scripts to validade if an app is still vulnerable to the attack narrative

[Krlier]

Motivation

In order to validate if an app is still vulnerable to the steps described in the attack narrative, we must checkout the branch, manually run each command and check it's output to see if the new code fixes the vulnerability or not.

It would be great if

We could add a new target into the makefile of each app to automate this process by simply running make check-sec and validating whether the new code mitigates the vulnerability or not.

What we expect

• Have a new target in the app's Makefile:

$ make check-sec 
Congrats! The app could not be exploited!

• Have this functionality in two or more apps (mobile included).

Tips

• Check if the app's attack narrative could be translated into an automated script.
• Maybe have some inspiration on how it was done in this app.