Hey Dev Community! 👋 Are you ready to delve into the realm of e-commerce management systems? I'm excited to share a project that combines the robustness of Laravel and Livewire for the admin panel, alongside Kotlin Multiplatform for a cr…

Sichere Programmierung dev.to 24.11.2023, 15:08 Uhr 2 Min. Lesezeit

↗ Quelle (dev.to)

Reagiere als Erste:r — dein Feedback zählt!

STANDARD — Regulärer Patch-Zyklus ~2 Min. (296 W.)

Deep Tech

Building an E-commerce Admin Panel with Laravel, Livewire, and Kotlin Multiplatform Hey Dev Community!

Angriffsfläche

PHP Runtime / Core

Exploit-Status

⚠️ Öffentlicher Exploit-PoC verfügbar

Sofortmaßnahme

Asset-Inventar prüfen & Upstream-Advisory überwachen

Overview

Our aim was to craft an admin panel that streamlines the management of products, categories, and users, complemented by a dynamic API to foster seamless interactions with the shopping platform.

Application

Our shopping application, built with Jetpack Compose Multiplatform in Kotlin, empowers users to browse, search, and make purchases across Android and iOS devices with a user-friendly interface.

Tech Stack

Backend (Admin Panel):

Laravel for a strong backend foundation

Livewire for dynamic frontend interactions.

Cross-Platform Application:

Kotlin Multiplatform for shared UI components.

Kotlin Coroutines for asynchronous tasks.

Compose Multiplatform for declarative UI.

Material3 for consistent design.

Ktor for networking capabilities.

Datastore for efficient local data storage.

Precompose for streamlined development.

Koin for dependency injection.

Installation Guide

Laravel Installation:

Clone the repository: git clone https://github.com/soheilkhaledabdi/shop.git

Navigate to the directory: cd shop

Run composer install

Create a copy of .env: cp .env.example .env

Generate the application key: php artisan key:generate

Execute migrations and seed the database: php artisan migrate --seed

Key Features

Admin Dashboard: Seamlessly manage products, categories,

orders, and customers.

Laravel & Livewire: Harness Laravel's backend prowess with Livewire for reactive UI.

Full API: Enable external integrations and interactions with the shopping platform.

Table of Features

Postman Collection

Access the Postman Collection here. You can also download the JSON configuration file.

Feel free to contribute to and enhance this project by visiting the repository here. Your support by giving a star ⭐ is immensely appreciated!

Let's collaborate and build remarkable solutions together! 🚀

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Remote Code Execution (RCE) Defense

WAF MitigationSofort

Virtuelles Patchen am Reverse Proxy / WAF für gefährdete URL-Pfade und Payloads aktivieren.

SecRule REQUEST_URI "@rx ..." "id:1001,phase:1,deny,status:403"

Web Shell ScanSofort

Web-Root auf neu angelegte Scripts, anomal modifizierte Dateien und Persistence scannen.

find /var/www -type f -name "*.php" -mmin -120

Outbound FilteringSofort

Ausgehenden Datenverkehr (Reverse Shells zu unbekannten IPs/Ports) blockieren.

ss -tunp | grep -E ":(4444|1337|8080|9001)"

Vendor Patching

Hersteller-Update in Staging validieren und schnellstmöglich in Produktion ausrollen.

apt update && apt --only-upgrade install <pkg>

Syntax validiert (0 Fehler)

title: Detect Exploitation - Building an E-commerce Admin Panel with Laravel, Livewire, and Kotlin Multiplatform
id: 7f687517-ad78-4f05-ac9b-1d9b82f29756
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-27
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access

Syntax validiert (0 Fehler)

rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-27"
        description = "YARA Signature for "
    strings:
        $str = "Building an E-commerce Admin P" ascii wide
    condition:
        any of them
}

Syntax validiert (0 Fehler)

index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("Building an E-commerce Admin Panel with ")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count

Syntax validiert (0 Fehler)

message: "*Building an E-commerce Admin Panel with *"

Syntax validiert (0 Fehler)

CommonSecurityLog
| where Message has "Building an E-commerce Admin Panel with "
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

🎯

MITRE ATT&CK Matrix Navigator 14 Taktiken

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

💡 Tipp: Klicken Sie auf eine TTP, um Gegenmaßnahmen und SIEM-Erkennungsregeln anzuzeigen.Enterprise Matrix v14.1

🚀 Auf tsecurity.de entdecken

◀ VORHERIGER BEITRAG 1 Min

"Hybride Bedrohungen": EU-Cybersicherheitsübung zum Schutz von Wahlen | heise online

IT Security Nachrichten

NÄCHSTER BEITRAG 1 Min

Android Auto Aktion: Googles Plattform überall kabellos nutzen; Dongles am Amazon Black Friday stark reduziert

IT NachrichtenWeiterlesen ▶

Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen

Fokus-Vektor:

Analyse für identifizierte Bedrohung auf Basis von Live-CTI (ENISA EUVD): CVSS 0.0 · EPSS 0.0% · CISA KEV: nein. Handlungsableitung aus den verlinkten Hersteller-Quellen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen

1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.

Schnell-Prompts für Analysten

Auch interessante Nachrichten Building an E-commerce Admin Panel with Laravel, Livewire, and Kotlin Multiplatform

Thematisch verwandte Begriffe: Building, Ecommerce, Admin, Panel · 6 Treffer

Sichere Programmierung DEV Community

สร้างเว็บธุรกิจ 5 หน้าด้วย AI agent: เทียบ MCP ของ WordPress.com, Storyblok, Sanity และ Webflow

vor 7 Tagen 📆 20.09.2026 um 04:36 Uhr

Weiterlesen ↗

Sichere Programmierung DEV Community

MCP ในเว็บไซต์ 13 ระบบ: ตัวไหนออกแบบ tool ดี ตัวไหนยังหลงทาง

vor 7 Tagen 📆 20.09.2026 um 06:56 Uhr

Weiterlesen ↗

Sichere Programmierung DEV Community

AI Didn’t Build My Backend for Me. I Used It as My Copilot.

vor 7 Tagen 📆 20.09.2026 um 00:17 Uhr

Weiterlesen ↗

Sichere Programmierung DEV Community

How I Built Authentication in Go and React: Doing It Right

vor 7 Tagen 📆 20.09.2026 um 06:02 Uhr

Weiterlesen ↗

Sichere Programmierung DEV Community

From Zero to One: How I Built a Multi-Market B2B Badge & Trophy Site with an AI Agent Configurator

vor 6 Tagen 📆 20.09.2026 um 07:22 Uhr

Weiterlesen ↗

AI & KI Nachrichten MarkTechPost

OpenClaw Releases 2026.9.5 With Atomic Updates, Plugin Hot Reload, Conversation Sharing, and Expanded GPT Live

vor 7 Tagen 📆 19.09.2026 um 23:44 Uhr

Weiterlesen ↗

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

Beiträge werden geladen ...

Videos werden geladen ...

🚀 Auf tsecurity.de entdecken

Kommentare über Building an E-commerce Admin Panel with Laravel, Livewire, and Kotlin Multiplatform

💬 Social News Network

Community Debatte 0 Beiträge

Tags:Noch keine Tags.

Noch keine Diskussion eröffnet

Sei der Erste, der seine Einschätzung oder PoC zu diesem Thema teilt.

🚀 Auf tsecurity.de entdecken

Echtzeit-Radar & Feeds

👥 Community & Social

🕒 tsecurity.de Such-Trends & Chronologie

Building an E-commerce Admin Panel with Laravel, Livewire, and Kotlin Multiplatform

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Remote Code Execution (RCE) Defense

2. Cyber Threat Intelligence & Forensik

MITRE ATT&CK Matrix Navigator 14 Taktiken

tsecurity.de Cognitive Threat RAG

Auch interessante Nachrichten Building an E-commerce Admin Panel with Laravel, Livewire, and Kotlin Multiplatform

สร้างเว็บธุรกิจ 5 หน้าด้วย AI agent: เทียบ MCP ของ WordPress.com, Storyblok, Sanity และ Webflow

MCP ในเว็บไซต์ 13 ระบบ: ตัวไหนออกแบบ tool ดี ตัวไหนยังหลงทาง

AI Didn’t Build My Backend for Me. I Used It as My Copilot.

How I Built Authentication in Go and React: Doing It Right

From Zero to One: How I Built a Multi-Market B2B Badge & Trophy Site with an AI Agent Configurator

OpenClaw Releases 2026.9.5 With Atomic Updates, Plugin Hot Reload, Conversation Sharing, and Expanded GPT Live

tsecurity.de LIVE

Echtzeit-Radar & Feeds

👥 Community & Social

Building an E-commerce Admin Panel with Laravel, Livewire, and Kotlin Multiplatform

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Remote Code Execution (RCE) Defense

2. Cyber Threat Intelligence & Forensik

MITRE ATT&CK Matrix Navigator 14 Taktiken

Mehr aus dieser Kategorie

tsecurity.de Cognitive Threat RAG

Auch interessante Nachrichten Building an E-commerce Admin Panel with Laravel, Livewire, and Kotlin Multiplatform

สร้างเว็บธุรกิจ 5 หน้าด้วย AI agent: เทียบ MCP ของ WordPress.com, Storyblok, Sanity และ Webflow

MCP ในเว็บไซต์ 13 ระบบ: ตัวไหนออกแบบ tool ดี ตัวไหนยังหลงทาง

AI Didn’t Build My Backend for Me. I Used It as My Copilot.

How I Built Authentication in Go and React: Doing It Right

From Zero to One: How I Built a Multi-Market B2B Badge & Trophy Site with an AI Agent Configurator

OpenClaw Releases 2026.9.5 With Atomic Updates, Plugin Hot Reload, Conversation Sharing, and Expanded GPT Live

tsecurity.de App