SkillFeeder › 全部 Skill › 工程开发 › hunt-cicd

hunt-cicd

hunt-cicd 是 SkillFeeder 收录的Agent Skill，来自 GitHub 仓库 elementalsouls/Claude-BugHunter，★ 5,471。Hunt CI/CD pipeline vulnerabilities — GitHub Actions workflow injection (pull_request_target Pwnrequest + ${{ }}-into-shell), self-hosted ru…。场景是工程开发 · 云与部署。能做的事包括Jenkins Script Console — Groovy execution → full RCE → dump the credential store、HUNT-CICD — CI/CD Pipeline Security、Crown Jewel Targets。打开 GitHub 自行安装。

打开 GitHub

仓库
elementalsouls/Claude-BugHunter
仓库星标
★ 5,471
场景
工程开发 · 云与部署
类型
Skill

能做什么

原文简介

Hunt CI/CD pipeline vulnerabilities — GitHub Actions workflow injection (pull_request_target Pwnrequest + ${{ }}-into-shell), self-hosted runner poisoning, OIDC trust-policy abuse, Jenkins script-console RCE and CVE-2024-23897 file read, GitLab CI runner-token registration, Terraform state file leakage, artifact/log secret leakage, pipeline env-var disclosure. Use when target has a public GitHub/G

同场景推荐