Node9 ProxyBLOCK

hook-payload.ts

return exec(process.execPath, [cli, ...args], opts);

id_rsa ... curl

~/.ssh ... curl

example: 'curl http://169.254.169.254/latest/meta-data/iam/',

catches: '169.254.169.254 and its peers, link-local and multicast',

const INVISIBLE_RE = /[͏----︀-️]|[\u{E0000}-\u{E007F}]/gu;

if (/exfil/.test(rule)) return "Where does the data go: your own service, or someone else's?";

const exfil = companions.some((c) => c.check === 'CI-4') || /exfiltrat|read env/.test(sig);

return rce && exfil

signals: ['agent has arbitrary shell (bare Bash) → can read env and exfiltrate'],

'crit RCE+exfil → run-code-and-steal'

example: 'curl http://192.168.1.10/admin',

example: 'curl http://169.254.169.254/latest/meta-data/iam/',

const INVISIBLE_RE = /[͏----︀-️]|[\u{E0000}-\u{E007F}]/gu;

expect(scanArgs({ env: 'redis://u:abc@host' })).toBeNull();

expect(scanArgs({ env: 'mysql://root:<your-password>@host' })).toBeNull();

const TOKEN = 'header.payload.signature';

JSON.stringify({ default: { apiKey: 'nk_probe_not_a_real_key', apiUrl } })

const token = 'pk.eyJ1IjoibXl1c2VyIiwiYSI6ImFiY2QifQ.AbCdEfGhIjKlMnOpQrSt';

expect(redactSecrets('api_key="ABCDEFGHIJ1234567890"')).toContain('api_key="********');

delete

.prettierignore

.releaserc.json

base-action-prompt-file-from-payload.yml