Erik van Straten<p><span class="h-card" translate="no"><a href="https://mastodon.social/@geerlingguy" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>geerlingguy</span></a></span> : Juan Mesaglio analysed these types of github phishing attacks in <a href="https://medium.com/@juan.mesaglio/emerging-phishing-attack-exploiting-github-app-to-gain-user-tokens-45a7b38880dc" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">medium.com/@juan.mesaglio/emer</span><span class="invisible">ging-phishing-attack-exploiting-github-app-to-gain-user-tokens-45a7b38880dc</span></a>.</p><p>He apparently also wrote a tool to help detect such phishing, and more (I've not looked at it, nor tested it).</p><p>The domain name in the sub-URL of the phishing site in your case, is visible halfway the URL:</p><p>hxxps://github-com-settings-applications.onrender[.]com/auth/callback</p><p>That domain name is hosted on 216.24.57[.]252 (AS 397273, render.com). It has a Domain Validated certificate issued by "Google Trust Services" (go figure).</p><p>As can be seen in the RELATIONS tab in <a href="https://www.virustotal.com/gui/ip-address/216.24.57.252" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">virustotal.com/gui/ip-address/</span><span class="invisible">216.24.57.252</span></a> a lot of *.onrender.com domain names are hosted there, many were recently fount to resolve to 216.24.57[.]252.</p><p>There is a fix: <a href="https://infosec.exchange/@ErikvanStraten/114222237036021070" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">infosec.exchange/@ErikvanStrat</span><span class="invisible">en/114222237036021070</span></a> (more details, long: <a href="https://infosec.exchange/@ErikvanStraten/113079966331873386" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">infosec.exchange/@ErikvanStrat</span><span class="invisible">en/113079966331873386</span></a>).</p><p><a href="https://infosec.exchange/tags/phishing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>phishing</span></a> <a href="https://infosec.exchange/tags/github" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>github</span></a> <a href="https://infosec.exchange/tags/FixTheInternet" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>FixTheInternet</span></a> <a href="https://infosec.exchange/tags/GoogleIsEvil" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>GoogleIsEvil</span></a></p>
Recent searches
Search options
#github
69 posts57 participants6 posts today
Any program can be a GitHub Actions shell
Link: https://yossarian.net/til/post/any-program-can-be-a-github-actions-shell/
Discussion: https://news.ycombinator.com/item?id=43617493
yossarian.netTIL: Any program can be a GitHub Actions shell
More from 
yossarian (1.3.6.1.4.1.55738)
#Development #Anniversaries
Still weird, still wonderful · 20 years ago, Git began to dominate version control https://ilo.im/1637dz
_____
#Programming #Coding #VersionControl #Git #GitHub #WebDev #Frontend #Backend
TIL: Any program can be a GitHub Actions shell
https://yossarian.net/til/post/any-program-can-be-a-github-actions-shell/
yossarian.netTIL: Any program can be a GitHub Actions shell
More from yossarian (1.3.6.1.4.1.55738)
New Open-Source Tool Spotlight 
VISTA is a Python-based AI chatbot built using OpenAI GPT and LangChain. It integrates with Pinecone for vector databases, focusing on semantic search and managing context. Looks like a good starting point if you're exploring AI chatbot frameworks. #AI #Chatbots
Project link on #GitHub 
https://github.com/RitikaVerma7/VISTA
#Infosec #Cybersecurity #Software #Technology #News #CTF #Cybersecuritycareer #hacking #redteam #blueteam #purpleteam #tips #opensource #cloudsecurity
— 
P.S. Found this helpful? Tap Follow for more cybersecurity tips and insights! I share weekly content for professionals and people who want to get into cyber. Happy hacking 
Ah, yes, because what we really needed was yet another shiny tool to transform our chaotic #GitHub projects into glorified endpoints no one asked for. 
Forget fixing your code or collaborating effectively; let's just drown ourselves in more #buzzwords and pretend it’s #innovation. 
https://github.com/idosal/git-mcp #shinytools #chaos #developerfrustration #HackerNews #ngated
GitHubGitHub - idosal/git-mcpContribute to idosal/git-mcp development by creating an account on GitHub.
For people with their own websites and domains, what do you use to host the site? I'm currently using GitHub pages for a links page, but I'd like to expand the site with some other things (e.g. portfolio, potentially blogs) without being explicitly linked to a public repo.
I have a domain, but most website builders I see require paying to connect your own. Free would be ideal, but I understand if that's not the case.
Continued thread
The Week in Review, Edition 86 (2025-14)
Topics:
Attic Find: iMac from 2006
Small updates on Bikerouter and change of domain registrar
Canceled: my paid GitHub subscription
Awesome Gitea: List of all sorts of interesting stuff
Brandenburg Odyssey: The route has been fixed
Old CSS, new CSS
Listened to this week: SHA, Karlo vom Dach, Patrik Pagan, Rachel Raw, Markus Schulz
#weekly #iMac #Apple #SnowLeopard #iFixIt #Ebay #Bikerouter #Hetzner #DNS #API #GitHub #Gitea #Brandenburg #BrandenburgOdyssee #ActivityPub #CSS #WebDevelopment #Techno
Marcus Jaschen · The Week in Review – 2025-14🖥️ Attic Find: iMac from 2006
🗺️ Small updates on Bikerouter and change of domain registrar
🐙 Canceled: my paid GitHub subscription
👨💻 Awesome Gitea: List of all sorts of interesting stuff
🚴♂️ Brandenburg Odyssey: The route has been fixed
🌐 Old CSS, new CSS
🔊 Listened to this week: SHA, Karlo vom Dach, Patrik Pagan, Rachel Raw, Markus Schulz
Wochenrückblick, Ausgabe 86 (2025-14)
Themen:
Dachbodenfund: iMac aus 2006
Bikerouter-Kleinigkeiten und Wechsel des Domain-Registrars
Gekündigt: mein bezahltes GitHub-Abo
Awesome Gitea: Liste mit allerlei interessantem Zeug
Brandenburg Odyssee: Die Route wurde gefixt
Old CSS, new CSS
In dieser Woche gehört: SHA, Karlo vom Dach, Patrik Pagan, Rachel Raw, Markus Schulz
#Wochenrückblick #iMac #Apple #SnowLeopard #iFixIt #Ebay #Bikerouter #Hetzner #DNS #API #GitHub #Gitea #Brandenburg #BrandenburgOdyssee #ActivityPub #CSS #WebDevelopment #Techno
Marcus Jaschen · Rückblick Kalenderwoche 2025-14🖥️ Dachbodenfund: iMac aus 2006
🗺️ Bikerouter-Kleinigkeiten und Wechsel des Domain-Registrars
🐙 Gekündigt: mein bezahltes GitHub-Abo
👨💻 Awesome Gitea: Liste mit allerlei interessantem Zeug
🚴♂️ Brandenburg Odyssee: Die Route wurde gefixt
🌐 Old CSS, new CSS
🔊 In dieser Woche gehört: SHA, Karlo vom Dach, Patrik Pagan, Rachel Raw, Markus Schulz
Benchmarking LLM social skills with an elimination game
GitHubGitHub - lechmazur/elimination_game: A multi-player tournament benchmark that tests LLMs in social reasoning, strategy, and deception. Players engage in public and private conversations, form alliances, and vote to eliminate each otherA multi-player tournament benchmark that tests LLMs in social reasoning, strategy, and deception. Players engage in public and private conversations, form alliances, and vote to eliminate each othe...
Releasing tei-rdfa (beta)
Python utility for extracting RDFa data from TEI-XML documents Resolves native TEI namespace formatting (through <prefixDef>)
https://pypi.org/project/tei-rdfa/ https://github.com/timofruehwirth/tei_rdfa
We welcome beta testing, feedback & contribution via #GitHub.
Boosts will be very much appreciated.
PyPItei-rdfaA Python utility for extracting RDFa data from TEI-XML documents.
YES3 Scanner: Open-source S3 security scanner for public access, ransomware protection https://www.helpnetsecurity.com/2025/04/07/yes3-scanner-open-source-s3-security-scanner/ #cloudsecurity #opensource #Don'tmiss #Hotstuff #software #GitHub #News #AWS
Help Net Security · YES3 Scanner: Open-source S3 security scanner for public access, ransomware protection - Help Net SecurityYES3 Scanner is an open-source tool that scans and analyzes 10+ different configuration items for your S3 buckets in AWS. This includes access such as
OK everyone, I did it. I started a blog. 
It has a welcome post and a small tip on sorting your emails from Git forges. More to come soon. Feel free to check it out!
David PapeHomewww.zyzzyxdonta.net -- Home of David Pape's website
Behold! A valiant quest to safely run #unsafe #code in #Rust 
—because, you know, why bother with safety when you can slap on a fancy crate and pretend you’ve solved world hunger? 
Just another day in the land of #GitHub, where #feature #bloat meets misguided innovation!
https://github.com/brannondorsey/mem-isolate #Innovation #HackerNews #ngated
GitHubGitHub - brannondorsey/mem-isolate: Run unsafe code safelyRun unsafe code safely. Contribute to brannondorsey/mem-isolate development by creating an account on GitHub.
Replied in thread
@seanfobbe personally I'd consider #gitea and #SelfHosting.
- As of now I abude #github as free, #DDoS-protected hosting and something #Microsoft burns money in.
Once any of my projects would gain traction I'd move from there away.
- I just am not a huge fan of @Codeberg even tho they are a better option.
I jist move to either SelfHosting or nowhere...
kann man in #nextcloud eine #webpage aus #markdown #nextcloud_notes stricken oder brauchts den Umweg via #github #docsifythis ?
Neue Sicherheitsfunktionen für #GitHub zum Schutz von Secrets | Developer https://www.heise.de/news/Neue-Sicherheitsfunktionen-fuer-GitHub-zum-Schutz-von-Secrets-10340873.html #git 
heise online · Neue Sicherheitsfunktionen für GitHub zum Schutz von Secrets
Starting a new project, which I plan to make open source, and hope to eventually build a community of contributors. However, I'm hesitant to put it on GitHub. I have my own Forgejo server, but I don't know how likely people are to contribute if they can't just use their existing GitHub account...
#forgejo #github #opensource