Top 10 winner

Exploring Continuous Integration Services as a Bug Bounty Hunter

"CI Knew There Would Be Bugs Here" — Exploring Continuous Integration Services as a Bug Bounty Hunter

EdOverflow, Justin Gardner and Corben Leo · EdOverflow · 26 April 2019

Public continuous-integration build logs on Travis CI, Circle CI and GitLab CI expose secrets belonging to bug bounty targets and their organisation members. The authors automated pulling logs through the vendor APIs and grepping them at scale, recovering GitHub access tokens with write access to company repositories and deployment SSH keys.

Record

Document

"CI Knew There Would Be Bugs Here" — Exploring Continuous Integration Services as a Bug Bounty Hunter

Researcher

EdOverflow, Justin Gardner and Corben Leo

Published by

EdOverflow

Date

26 April 2019

Topic

Other

In the archive

• Ranked #7 in the 2019 Top 10 Web Hacking Techniques

Related sources

• Follow-up build-log tool

Tags

• info-leak
• ci-cd
• github
• gitlab
• bug-bounty
• tooling
• large-scale-scan
• rest-api
• owasp-a08-2021

This page is the archive's own catalogue record. The research is the work of EdOverflow, Justin Gardner and Corben Leo, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.