Sudo on Th3B0yWh0L1v3d — Security Writeups

Sudo on Th3B0yWh0L1v3d — Security Writeups https://th3b0ywh0l1v3d.github.io/tags/sudo/ Recent content in Sudo on Th3B0yWh0L1v3d — Security Writeups Hugo en-us Fri, 05 Jun 2026 00:00:00 +0000 Volatile Component — GPN CTF 2026 https://th3b0ywh0l1v3d.github.io/ctf/gpn-ctf-2026/misc/volatile-component/ Fri, 05 Jun 2026 00:00:00 +0000 https://th3b0ywh0l1v3d.github.io/ctf/gpn-ctf-2026/misc/volatile-component/ Exploiting a GitHub Actions workflow that interpolates an untrusted issue body into a run block, gaining RCE to dump the FLAG secret from the Runner.Worker process memory and exfiltrating it as hex to bypass log masking.