Ziead Shab Kalieh

Odoo Penetration Test (SWB Group)

Performed an authorized security assessment of an Odoo ERP deployment for SWB Group to evaluate real-world risk exposure. Identified and validated multiple security weaknesses through controlled testing in accordance with ethical guidelines. The assessment confirmed the potential for elevated access, including administrative-level impact, and the findings were responsibly disclosed to company leadership with clear remediation recommendations to close the vulnerabilities and prevent recurrence.

Scope & Activities

• Web application and ERP security assessment (Odoo)
• Authentication and access-control testing
• Configuration and exposure review (security hardening)
• Controlled exploitation to validate business impact (non-destructive)
• Reporting, responsible disclosure, and remediation guidance

Key Outcomes

• Identified critical weaknesses and demonstrated the potential impact under controlled conditions
• Successfully escalated access to an administrative level ethically to confirm severity
• Delivered an executive-friendly report and technical remediation plan to management
• Supported closure of the vulnerabilities and strengthened the overall security posture

Tools & Standards

• Methodology aligned with OWASP Testing Guide and common web application security practices
• Vulnerability documentation with severity prioritization and recommended mitigations
• Retesting approach to confirm fixes (when applicable)

Notes

• Technical details are intentionally redacted due to responsible disclosure and confidentiality requirements.