CVE-2020-14144-GiTea-git-hooks-rce

CVE-2020-14144 - GiTea 认证远程代码执行（RCE） 一个利用 CVE-2020-14144（GiTea 认证远程代码执行）的脚本，通过 Git 钩子实现攻击 功能特性 从 IP 和端口自动生成反向 Shell 载荷 使用 -f 选项上传自定义 Shell 脚本并在远程执行 使用用户名和密码自动登录 用法 $ ./CVE-2020-14144-GiTea-git-hooks-rce.py -h / | CVE-2020-14144 | | | | | | | | | | |/ / | Authenticated Remote Code Execution | || |...

git-secrets

============ git-secrets 防止你将密码和其他敏感信息提交到 git 仓库中。 .. contents:: :depth: 2 简介 :: git secrets --scan -r|--recursive --cached --no-index --untracked ... git secrets --scan-history git secrets --install -f|--force git secrets --list --global git secrets --add -a|--allowed -l|--literal --global git...

GitBackdorizer

GitBackdorizer BETA GitBackdorizer 是一个概念验证工具，完全受 Ulisses Castro 的演讲 50 ton of backdoors 启发，利用用户注意力缺失的特性来窃取 Git 访问凭据。 工作原理 GitBackdorizer 由三个组件组成：处理程序、投放器和载荷。 处理程序 处理程序启动一个 HTTP 服务器用于捕获凭据，并提供菜单以配置投放器的载荷。投放器的分发由攻击者负责。 投放器 投放器设计为具有尽可能高的兼容性，避免使用任何非 sh 特有的功能。其工作方式如下： 识别被植入后门的 Git 钩子是 pre-push 钩子还是其他钩子...

CVE-2021-21300

CVE-2021-21300 git多个版本中，对符号链接处理不严格。在大小写敏感（例如Linux）的文件系统上传文件到git后，使用大小写不敏感文件系统（例如Windows）的主机克隆恶意 仓库时可能导致远程命令执行 。 受影响版本 从 2.15 至 现有的 2.30.1 解决方案 1、升级版本 2、如下 禁用git 的symlink： git config --global core.symlinks false 禁用 process filter 通常是 LFS 使用此功能，可以通过 git config --show-scope --get-regexp...

Gitea-Git-Hooks-RCE-CVE-2020-14144-

Gitea Git Hooks 远程代码执行（CVE-2020-14144） OffsecProvingGrounds 练习 — Roquefort 机器 Writeup 与 POC 概述 项目| 详情 ---|--- 机器| Roquefort Proving Grounds Practice 操作系统| Linux Gitea 版本| 1.7.5 CVE| CVE-2020-14144 攻击向量| 通过 Git Hooks 的已认证 RCE 用户 Shell| chloe Gitea 1.1.0 → 1.12.5 版本允许具有 "May create git hooks" （可创建...

CVE-2025-8110-Gogs-Remote-Code-Execution

受影响软件：Gogs（自托管Git服务）0.13.0版本之前。 漏洞类型：Git钩子机制中的命令注入。 描述：拥有仓库推送权限的攻击者可以构造恶意的Git钩子，将命令注入到post-receive钩子脚本中，从而导致在Gogs服务器上远程执行代码。...

CVE-2024-10220-githooks

CVE-2024-10220 测试 参考 https://irsl.medium.com/sneaky-write-hook-git-clone-to-root-on-k8s-node-e38236205d54...

CVE-2026-52813-Gogs-RCE

CVE-2026-52813 — Gogs 路径穿越导致 Git Hooks 远程代码执行（防御向分析） 安全研究 / 蓝队向 writeup。本仓库不包含武器化 PoC 。 需要复现的研究者请使用官方 advisory 引用的公开 PoC。 项目| 内容 ---|--- CVE| CVE-2026-52813 别名| GHSA-c39w-43gm-34h5 / GO-2026-5305 受影响版本| Gogs /），可在另一个仓库的本地 checkout 内落地恶意 hooks/update，由 git 自动执行 → 以 git 用户身份 RCE。 受影响版本与处置 Gogs 版本| ...

CVE-2025-65964

n8n Git Hooks CTF 演示 ⚠️ 本仓库仅供教育和CTF演示目的 使用。 场景 自动化平台（例如 n8n）将Git操作作为工作流的一部分。 该工作流允许通过 git config 进行任意Git配置。 攻击者控制的工作流设置： core.hooksPath=hooks/ 随后，Git将从仓库目录执行钩子。 目标 演示以下内容： Git钩子在本地执行 钩子可以存在于克隆的仓库内部 滥用 core.hooksPath 可能导致命令执行 不包含任何有害命令。...

CVE-2026-60004-PoC

CVE-2026-60004: Ejecución remota de código en la API Diffpatch de Gitea !WARNING Este repositorio está destinado exclusivamente a la investigación de seguridad autorizada y a pruebas de laboratorio controladas. No ejecute la prueba de concepto contra sistemas que no posea o para los que no tenga...

CVE-2026-78677

A flaw was found in GitPython. This vulnerability allows a remote attacker to create arbitrary Git directories outside the intended clone destination. By manipulating the separategitdir parameter during repository cloning, an attacker can redirect repository metadata to an attacker-controlled...

CVE-2026-93993: Inclusion of Functionality from Untrusted Control Sphere

Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell commands with the privileges of the user...

CVE-2026-86320 Flatpak-builder: host code execution via `git am` hook execution in patch source extraction (`use-git-am`)

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...

CVE-2026-86320: Improper Control of Generation of Code

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...

PT-2026-94191

Name of the Vulnerable Software and Affected Versions flatpak-builder affected versions not specified Description A flaw exists where Git hooks are not disabled when applying patch sources with use-git-am set to true. An attacker providing a malicious source containing a Git post-applypatch hook...

gitpython: GitPython: Remote Code Execution via malicious Git hooks

A flaw was found in GitPython. This vulnerability allows a remote attacker to achieve arbitrary code execution. By supplying a specially crafted template parameter to the Repo.init function, an attacker can point to a directory containing malicious Git hooks. When Git operations are performed on...

CVE-2026-19590

OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a user opens an attacker-prepared repository whose preserved .git/config points core.hooksPath to an attacker-controlle...

EUVD-2026-69393

OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a user opens an attacker-prepared repository whose preserved .git/config points core.hooksPath to an attacker-controlle...

CVE-2026-19590

OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repository's local core.hooksPath setting. If a user opens an attacker-prepared repository whose preserved .git/config points core.hooksPath to an attacker-controlle...

CVE-2026-19590

OpenAI Codex Desktop for Windows and macOS is vulnerable to arbitrary code execution due to a lack of proper sanitization of configuration settings. Specifically, automated Git operations trust the repository's local core.hooksPath setting. An attacker can provide a specially crafted repository w...