writeups.xyz / Leaking Secrets From GitHub Actions: Reading Files And Environment Variables, Intercepting Network/Process Communication, Dumping Memory

Submitter : c2a

Date: 5 January 2023

Bounty : undisclosed

Vulnerabilities :

• CI/CD
• OS Command Injection
• RCE

Programs :

• GitHub

Authors :

• Karim Rahal (@KarimPwnz)

Link :
https://karimrahal.com/2023/01/05/github-actions-leaking-secrets/