Breaking Ground·24 min
Yusuke Kubo · Kiyohito Yamamoto
Shows how GitHub Actions custom actions and self-hosted runners can be abused for code delivery and command-and-control.
attackbuilddevops+2
DEF CON 34 talks are here: 354 talks, summarized and searchable.
Browse DEF CON 341 talk in the archive.
1–1 of 1 talk
Breaking Ground·24 min
Yusuke Kubo · Kiyohito Yamamoto
Shows how GitHub Actions custom actions and self-hosted runners can be abused for code delivery and command-and-control.