writeups.xyz / Forging signed commits on GitHub

Submitter : c2a

Date: 11 November 2023

Bounty : 10,000

Vulnerabilities :

• Parsing Issue
• Regex
• Signature Bypass

Programs :

• GitHub

Authors :

• Iter.ca (@_Smitop)

Link :
https://iter.ca/post/gh-sig-pwn/