writeups.xyz writeups.xyz / Hugo Vincent (@Hugow_vincent)

Title Vulnerabilities Programs Authors
Github Actions Exploitation: Dependabot
Injecting Java In-memory Payloads For Post-exploitation
GitHub Actions Exploitation: Self Hosted Runners
GitHub Actions Exploitation: Repo Jacking And Environment Manipulation
Github Actions Exploitation: Untrusted Input
Hijacking GitHub Runners To Compromise The Organization