Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
gha-lab-00d54c717d — Security-research lab: CVE-2026-47172 (workflow_run pwn request in deploy.yaml) — flattened snapshot of duck-organization/questbot at 1903b2f | Kitploit
Tools/GitHubGitHub/pvharmo2/gha-lab-00d54c717d
Vulnerability AnalysisDevSecOpsSupply Chain SecurityLearning & EducationCurated Resources
GitHubpvharmo2/gha-lab-00d54c717d

gha-lab-00d54c717d

Security-research lab: CVE-2026-47172 (workflow_run pwn request in deploy.yaml) — flattened snapshot of duck-organization/questbot at 1903b2f

View Repository
16h 29m agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Automated research artifact — not the upstream project.

This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of duck-organization/questbot at commit 1903b2f9677e7104c5f64dd5bd1a72db130f143e (2026-05-17), redistributed under that project's own licence, whose file is included unchanged in this snapshot.

The upstream project is not involved, is never targeted, and the vulnerability studied here is already public. Every secret and variable in this repository is a randomly generated dummy value — no real credential is present. Action references and runner images are pinned to what they resolved to on 2026-05-17; see pinning.md in the harness output for every change made to the snapshot.

Questions or objections: [email protected]

Duck Organization Banner
Created By Badge Created Using Badge

Features

Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support!

Quest Bot is capable of:

  • All moderation commands such as: /ban, /kick, /mute & /warn.
  • Autoroles
  • Utilties such as reminders.
  • Complete ticket system.
  • Welcoming new members.
  • Easy setup using /setup.
  • Fun stuff such as confessions!

Contributing

Quest Bot is worked on by Duck Organization but we are opensource! Anyone can contribute!

Feel free to open a pull request! Just make sure to follow the guidelines at CONTRIBUTING.md.

Running locally

  1. Clone the repository.
  2. Create a PostgreSQL database for this bot.
  3. Create a .env file based on .env.example and fill in the required values.
  4. Install dependencies with pnpm install
  5. Run the development server with pnpm dev
  6. The bot will register commands automatically on startup.

License

This project is licensed under the Affero GNU General Public License v3.0 (AGPL-3.0). See LICENSE for more details.

Links

Status Page, Bot Documentation & Official Discord

Contact

If you have any questions or suggestions, feel free to reach out to us on our Discord server or send us an email at [email protected].

Download Tool