How I Hacked Your Private Repository in GitHub (And Got JackShit)

TLDR: During my work with a third-party app integrating with GitHub, I discovered a critical vulnerability in the GitHub App installation flow leading to repository takeover. This vulnerability allows an attacker to hijack the integration process and gain unauthorized access to arbitrary private repositories, posing a significant security risk.

After reporting this security vulnerability to GitHub, I got back a statement that it is an “intentional design decision”.

Introduction

GitHub Apps, also …

bug bounty cybersecurity github microsoft security