Release of version v0.6.0
This version bump includes bug fixes along with improvements to the Runner-on-Runner attack features. The payload only mode is now more flexible because it will create a C2 repository if one is not specified. This will be useful for manual exploitation scenarios and for red teamers who simply want to use the GitHub Actions runner as a C2 implant.
What's Changed
- Bump actions/setup-python from 4 to 5 by @dependabot in #45
- Bump pypa/gh-action-pypi-publish from 1.10.1 to 1.10.2 by @dependabot in #39
- Bump psf/black from 24.8.0 to 24.10.0 by @dependabot in #55
- Bump pypa/gh-action-pypi-publish from 1.10.2 to 1.12.2 by @dependabot in #59
- Bump softprops/action-gh-release from 2.0.8 to 2.0.9 by @dependabot in #57
- Fix broken windows RoR and improve attack UX. by @AdnaneKhan in #61
- Fix inconsistency with environment enumeration by @AdnaneKhan in #63
- Bump version to 0.6.0 by @github-actions in #64
Full Changelog: v0.5.8...v0.6.0
Contributors
AdnaneKhan and dependabot