🧰 webhook.site

The items that name it 6

• New Evidence Shows LiteLLM Secret-Stealing Workflows Ran 11 Days Before Supply Chain Attack
  writeupas classification.key entities2026-10-23
• Loud, Fast, and Everywhere: Anatomy of a Real AI-Driven Cloud Attack
  writeupas classification.key entities2026-10-19
• UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations
  writeupas tools2026-08-20

  Third-party webhook service abused as an out-of-band exfiltration/callback endpoint to confirm RCE and receive reconnaissance data

• CoSnitch: When Your AI Assistant Becomes Its Own Whistleblower (CVE-2026-24301)
  writeupas tools2026-08-18

  Used in the proof-of-concept as an attacker-controlled webhook endpoint to receive exfiltrated data via URL path

• Compromised PyPI Package: mrmustard 0.7.4 Steals SSH, Cloud, and Kubernetes Credentials
  writeupas tools2026-07-25

  Used by the attacker as a collection endpoint for exfiltrated PyPI and Codecov tokens (abused legitimate service, not a defensive tool).

• TrustFall: 1-click coding agent RCE in Claude, Cursor, Copilot
  writeupas tools2026-05-07

  Used by researchers as a collector endpoint to demonstrate C2 exfiltration of process.env in PoC