SAAS-GH-CODESPACEPrivilege Escalation

GitHub Codespaces Abuse

A repo's devcontainer + secrets give a Codespace owner privileged tokens — compromise the codespace to harvest.

§ Where this technique fits

SAAS-GH-CODESPACE is catalogued under the Privilege Escalation tactic of the offensive-security kill-chain. It appears in 0 approved dossiers in the registry, typically.