adnanthekhan.com/2024/01/19/web3s-achilles-heel-a-supply-chain-attack-on-astar-network

Preview meta tags from the adnanthekhan.com website.

Linked Hostnames

21

Thumbnail

Search Engine Appearance

Google

https://adnanthekhan.com/2024/01/19/web3s-achilles-heel-a-supply-chain-attack-on-astar-network

Web3's Achilles' Heel: A Supply Chain Attack on Astar Network

Overview John Stawinski and I have been conducting research and submitting bug bounty reports focusing on a specific type of poisoned pipeline execution attack that I like to refer as “Self-Hosted Runner Takeover”. It manifests when a public repository has an attached non-ephemeral self-hosted runner without requiring approval for workflows on the pull_request trigger. One of the organizations we discovered the vulnerability in was Astar network. According to Wikipedia, Astar Network is a blockchain that aims to become Polkadot’s “smart contract hub” and serves as a parachain for Polkadot.



Bing

Web3's Achilles' Heel: A Supply Chain Attack on Astar Network

https://adnanthekhan.com/2024/01/19/web3s-achilles-heel-a-supply-chain-attack-on-astar-network

Overview John Stawinski and I have been conducting research and submitting bug bounty reports focusing on a specific type of poisoned pipeline execution attack that I like to refer as “Self-Hosted Runner Takeover”. It manifests when a public repository has an attached non-ephemeral self-hosted runner without requiring approval for workflows on the pull_request trigger. One of the organizations we discovered the vulnerability in was Astar network. According to Wikipedia, Astar Network is a blockchain that aims to become Polkadot’s “smart contract hub” and serves as a parachain for Polkadot.



DuckDuckGo

https://adnanthekhan.com/2024/01/19/web3s-achilles-heel-a-supply-chain-attack-on-astar-network

Web3's Achilles' Heel: A Supply Chain Attack on Astar Network

Overview John Stawinski and I have been conducting research and submitting bug bounty reports focusing on a specific type of poisoned pipeline execution attack that I like to refer as “Self-Hosted Runner Takeover”. It manifests when a public repository has an attached non-ephemeral self-hosted runner without requiring approval for workflows on the pull_request trigger. One of the organizations we discovered the vulnerability in was Astar network. According to Wikipedia, Astar Network is a blockchain that aims to become Polkadot’s “smart contract hub” and serves as a parachain for Polkadot.

  • General Meta Tags

    13
    • title
      Web3's Achilles' Heel: A Supply Chain Attack on Astar Network | Adnan Khan's Blog
    • charset
      utf-8
    • X-UA-Compatible
      IE=edge
    • viewport
      width=device-width, initial-scale=1, shrink-to-fit=no
    • robots
      index, follow

  • Open Graph Meta Tags

    7
    • og:url
      https://adnanthekhan.com/2024/01/19/web3s-achilles-heel-a-supply-chain-attack-on-astar-network/
    • og:site_name
      Adnan Khan's Blog
    • og:title
      Web3's Achilles' Heel: A Supply Chain Attack on Astar Network
    • og:description
      Overview John Stawinski and I have been conducting research and submitting bug bounty reports focusing on a specific type of poisoned pipeline execution attack that I like to refer as “Self-Hosted Runner Takeover”. It manifests when a public repository has an attached non-ephemeral self-hosted runner without requiring approval for workflows on the pull_request trigger. One of the organizations we discovered the vulnerability in was Astar network. According to Wikipedia, Astar Network is a blockchain that aims to become Polkadot’s “smart contract hub” and serves as a parachain for Polkadot.
    • og:locale
      en-us

  • Twitter Meta Tags

    4
    • twitter:card
      summary_large_image
    • twitter:image
      https://adnanthekhan.com/wp-content/uploads/2024/01/12885-1.png
    • twitter:title
      Web3's Achilles' Heel: A Supply Chain Attack on Astar Network
    • twitter:description
      Overview John Stawinski and I have been conducting research and submitting bug bounty reports focusing on a specific type of poisoned pipeline execution attack that I like to refer as “Self-Hosted Runner Takeover”. It manifests when a public repository has an attached non-ephemeral self-hosted runner without requiring approval for workflows on the pull_request trigger. One of the organizations we discovered the vulnerability in was Astar network. According to Wikipedia, Astar Network is a blockchain that aims to become Polkadot’s “smart contract hub” and serves as a parachain for Polkadot.

  • Link Tags

    7
    • apple-touch-icon
      https://adnanthekhan.com/apple-touch-icon.png
    • canonical
      https://adnanthekhan.com/2024/01/19/web3s-achilles-heel-a-supply-chain-attack-on-astar-network/
    • icon
      https://adnanthekhan.com/favicon.ico
    • icon
      https://adnanthekhan.com/favicon-16x16.png
    • icon
      https://adnanthekhan.com/favicon-32x32.png

  • Website Locales

    1
    • EN country flagen
      https://adnanthekhan.com/2024/01/19/web3s-achilles-heel-a-supply-chain-attack-on-astar-network/

Links

33