[ index ]

archive

03 entries

Redirect2Admin: Exploiting an SSRF chain to leak internal keys and take over GitHub Enterprise Server

How a requirements check, authentication between services, and two Protobuf messages ended up exposing admin access to GHES.