GitHunt

BHEU Demos Dieses Repository enthält drei Demonstrationen für den Black Hat Europe 2025-Vortrag The Forensic Trail On GitHub: Hunting For Supply Chain Activity 1. potentialattacksdemo : Eine Flask-Webanwendung, die eine Demonstration zur Identifizierung und Untersuchung eines Angriffs auf Basis d...

SpotBugs Access Token Theft Identified as Root Cause of GitHub Supply Chain Attack

The cascading supply chain attack that initially targeted Coinbase before becoming more widespread to single out users of the "tj-actions/changed-files" GitHub Action has been traced further back to the theft of a personal access token PAT related to SpotBugs. "The attackers obtained initial acce...