Posts

• Feb 23, 2022

  Stealing a few more GitHub Actions secrets

• Mar 17, 2021

  Stealing arbitrary GitHub Actions secrets

• Mar 10, 2021

  Messing with GitHub's fork collaboration for fun and profit

• Nov 23, 2019

  Exploiting padding oracles with fixed IVs

• Nov 12, 2019

  How I accidentally took down GitHub Actions

• Nov 5, 2019

  Bypassing GitHub's OAuth flow

subscribe via RSS