CVE-2017-1000117

CVE-2017-1000117 How it works? root@kitploit: $ git clone --recursive [email protected]:ikmski/CVE-2017-1000117.git How to create this repository root@kitploit: $ cat message.txt | gzip | base64 command $ git submodule add [email protected]:ikmski/Hello-World.git subs/CVE-2017-1000117 $...

CVE-2024-32002

CVE-2024-32002 Versions 1.0.0 This version work only on remote target with authenticated user and git version 2.45.0 affected. This vulnerability affect Git with version: 2.45.0 Proof Of Concept The POC can trigger an RCE Remote Command Execution using the git clone command via specific vulnerabl...

CVE-2025-48384-submodule

CVE-2025-48384-submodule...

CVE-2018-11235-Git-Submodule-CE

CVE-2018-11235-Git-Submodule-CE CVE-2018-11235-Git PoC Pull from Docker docker pull qweraqq/cve-2018-11235-git-submodule-rce Start Git Http Server docker run -d -p 8080:80 qweraqq/cve-2018-11235-git-submodule-rce PoC git clone --recurse-submodules http://git.gitserver/malicious.git...

running-CVE-2024-32002-locally-for-tesing

We are adapting this for local use we follow this blog post but with some key differences https://amalmurali.me/posts/git-rce How It Works 1. A malicious repository gitrce includes a submodule with a specially crafted path. 2. The submodule path uses a case variation that exploits the...

CVE-2024-32002-Reverse-Shell

CVE-2024-32002-Reverse-Shell This script demonstrates how to exploit CVE-2024-32002 to obtain a reverse shell, providing remote access to the affected system. Use it with caution in controlled environments and only for educational or security testing purposes. Blog Post This script is inspired by...

CVE-2025-48384-submodule

CVE-2025-48384 Submodule This submodule contains a malicious post-checkout hook for demonstration...

CVE-2025-48384-test

Reproduce Command Line root@kitploit: git clone --recursive https://github.com/beishanxueyuan/CVE-2025-48384-test.git 修改指向的GitHub仓库 root@kitploit: git init repo git -C repo -c protocol.file.allow=always submodule add https://github.com/beishanxueyuan/CVE-2025-48384.git sub git -C repo mv sub...

CVE-2018-11235-PoC

PoC exploit for CVE-2018-11235 root@kitploit: repository: http://REDACTED/2018-11235PoC.git/ return: Submodule 'aaa' https://repo1 registered for path 'aaa' Submodule '../../fakegit/modules/evil' https://repo2 registered for path 'evil' Submodule path 'aaa': checked out...

CVE-2025-48384-submodule

See https://github.com/liamg/CVE-2025-48384...

cve-2024-32002-submodule-aw

CVE-2024-32002 Submodule AW A submodule to demonstrate CVE-2024-32002. Demonstrates arbitrary write into .git. See cve-2024-32002-poc-aw for the working POC that utilises this repo. What this repo contains Simply, a random file so that we can detect it when we clone the parent POC repo The file i...

CVE-2025-48384-submodule

This repository does not have a README...

CVE-2025-48384-poc

CVE-2025-48384-poc CVE-2025-48384 takes the form of an improper link resolution link following vulnerability in git. Specifically, filenames with carriage returns are improperly parsed in .git/config, and including a symlink to point a git hook executable located in a submodule as the submodule...

hate_crack

root@kitploit: / | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Instalación Instalar desde el código fuente es la única vía compatible. hatecrack no se distribuye en PyPI: pip install hate-crack resuelve a un marcador de...

cve-2024-32002-poc-rce

CVE-2024-32002 RCE POC A POC for CVE-2024-32002 demonstrating Remote Code Execution RCE. See cve-2024-32002-poc-rce for the related submodule repository. What this repo contains A symlink with an arbitraty name that links to the .git directory. A .gitmodules file that defines the malicious...

poc_CVE-2024-32002_submodule

This repository does not have a README...

CVE-2025-48384

PoC for CVE-2025-48384 See CVE-2025-48384 To run: root@kitploit: git -c protocol.file.allow=always clone --recurse-submodules [email protected]:liamg/CVE-2025-48384.git Example output: root@kitploit: git -c protocol.file.allow=always clone --recurse-submodules CVE-2025-48384 test Cloning int...

CVE-2024-32002

GIT RCE CVE-2024-32002 Description | CVE-2024-32002 | https://www.tarlogic.com/blog/cve-2024-32002-vulnerability-git/ | Exploit | First you need to create "calledrepo" "commandrepo" repos on git. | Victim will later call the calledrepo with "git clone --recursive calledrepo.git" that redirect to...

CVE-2024-32002-Exploit

root@kitploit: !/bin/bash git init hook cd hook mkdir -p y/hooks cat y/hooks/post-checkout dotgit.txt git hash-object -w --stdin dot-git.hash printf "120000 %s 0\ta\n" "$cat dot-git.hash" index.info git update-index --index-info index.info git commit -m "add-symlink" git remote add origin...

CVE-2025-48384

CVE-2025-48384: Breaking git with a carriage return and cloning RCE Reproduction from https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384. All credits to David Leadbeater. This is a basic reproduction attempt of the vulnerability. To trigger, do git clone --recursive...