Abusing Repository Webhooks to Access Internal CI/CD Systems at Scale
Repository webhooks, used to trigger CI/CD pipelines, can be abused to access internal systems.
- from
- CI/CD Attacks
- added
- 2026-10-10
- likes
- 0
similar
-
How we abused Slack's TURN servers to gain access to internal services enablesecurity.com
-
Vulnerable GitHub Actions Workflows Part 1: Privilege Escalation Inside Your CI/CD Pipeline legitsecurity.com
GitHub Actions workflow_run PE.
-
Hacking GitHub AWS integrations again dagrz.com
Attacking misconfigured pipelines that use OIDC.
-
pwn_jenkins github.com
Notes about attacking Jenkins servers.
-
How We Discovered Vulnerabilities in CI/CD Pipelines of Popular Open-Source Projects cycode.com
Extracting all repository and organization secrets in GitHub Actions.
-
Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests securitylab.github.com
Combining pull_request_target workflow trigger with an explicit checkout of an untrusted PR may lead to repository compromise.
CI/CD Attacks › Techniques > Defense Evasion: “Repository webhooks, used to trigger CI/CD pipelines, can be abused to access internal systems.”