writeups.xyz / GitHub Actions Exploitation: Self Hosted Runners

Submitter : c2a

Date: 17 July 2024

Bounty : undisclosed

Vulnerabilities :

• CI/CD
• Self-Hosted Runner Takeover

Programs :

• Haskell
• Scroll

Authors :

• Hugo Vincent (@Hugow_vincent)

Link :
https://www.synacktiv.com/publications/github-actions-exploitation-self-hosted-runners.html