Red Teaming GitHub: Part 3 VSCode Extensions and Tasks 11 December 2024·9 mins Security GitHub Red Team Part three of Red Teaming GitHub, I go through my research in VSCode Extensions and cover how adversaries abuse VSCode Tasks
Red Teaming GitHub: Part 2 GitHub CLI 21 August 2024·16 mins Security GitHub Red Team Part two of Red Teaming GitHub, in this post I cover how an adversary can abuse the GitHub CLI.
Red Teaming GitHub: Part 1 Attack Surface 13 May 2024·8 mins Security GitHub Red Team Part one of Red Teaming GitHub, in this post I cover the attack surface and different threats to the service.