gh-dork

gh-dork Supply a list of dorks and, optionally, one of the following: a user -u a file with a list of users -uf an organization -org a file with a list of organizations -of a repo -r You can also pass: an output directory to store results -o a filename to store valid items, if your users or org...

git-all-secrets

git-all-secrets About git-all-secrets is a tool that can: Clone multiple public/private github repositories of an organization and scan them, Clone multiple public/private github repositories of a user that belongs to an organization and scan them, Clone a single public/private repository of an...

CVE-2024-0507_CVE-2024-0200-github

Intro This repository contains exploits we have developed for GitHub Enterprise vulnerabilities CVE-2024-0507 and CVE-2024-0200. Check out the full writeup at https://blog.convisoappsec.com/en/analysis-of-github-enterprise-vulnerabilities-cve-2024-0507-cve-2024-0200/ CVE-2024-0507 Privilege...

SCMKit

SCMKit Description S ource C ode M anagement Attack Toolkit - SCMKit is a toolkit that can be used to attack SCM systems. SCMKit allows the user to specify the SCM system and attack module to use, along with specifying valid credentials username/password or API key to the respective SCM system...

Github Enterprise - Remote Code Execution

An unsafe reflection vulnerability was identified in GitHub Enterprise Server that could lead to reflection injection. This vulnerability could lead to the execution of user-controlled methods and remote code execution. To exploit this bug, an actor would need to be logged into an account on the...

ghe-push-option-rce-scanner

CVE-2026-3854 — 푸시 옵션 인젝션을 통한 GitHub Enterprise Server RCE 개요 GHE에서 푸시 옵션 값에 대한 부적절한 중화. 푸시 접근 권한이 있는 공격자가 인스턴스에서 RCE를 달성할 수 있습니다. 필드| 값 ---|--- CVE| CVE-2026-3854 심각도| CRITICAL 제품| GitHub Enterprise Server CISA KEV| 2026-03-10 공격 유형| 푸시 옵션 인젝션을 통한 RCE 인증 필요| 없음 영향을 받는 버전 상태| 버전 ---|--- ❌ 취약|...

git-all-secrets

git-all-secrets О программе git-all-secrets — это инструмент, который может: Клонировать несколько публичных/приватных репозиториев GitHub организации и сканировать их, Клонировать несколько публичных/приватных репозиториев пользователя, принадлежащего организации, и сканировать их, Клонировать...

Exploit_CVE-2026-3854

ExploitCVE-2026-3854 CVE-2026-3854는 GitHub.com 및 GitHub Enterprise Server에서 발생하는 원격 코드 실행RCE 취약점입니다. 이 취약점은 다음과 같이 git push 명령어에 명령을 주입하여 악용될 수 있습니다: root@kitploit: git push -o '' origin master 이 취약점의 악용 여부를 검토하려면 push 옵션에 ";"가 포함된 push 작업에 대해 /var/log/github-audit.log를 검토할 것을 권장합니다. 취약한 버전: GitH...

SCMKit

SCMKit 설명 S ource C ode M anagement Attack Toolkit - SCMKit은 SCM 시스템을 공격하는 데 사용할 수 있는 툴킷입니다. SCMKit을 사용하면 SCM 시스템과 사용할 공격 모듈을 지정하고, 해당 SCM 시스템에 대한 유효한 자격 증명사용자 이름/비밀번호 또는 API 키을 지정할 수 있습니다. 현재 SCMKit이 지원하는 SCM 시스템은 GitHub Enterprise, GitLab Enterprise 및 Bitbucket Server입니다. 지원되는 공격 모듈에는 정찰, 권한 상승...

CVE-2026-3854-PoC

CVE-2026-3854 PoC — GitHub RCE via X-Stat Push Option Injection For educational and authorized security research purposes only. Do not use against any system without explicit written permission. Overview CVE-2026-3854 is a Remote Code Execution vulnerability in GitHub Enterprise Server's and...

EUVD-2026-69716

A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed remote code execution on the instance. Insufficient network isolation allowed malicious pre-receive hook code to impersonate an internal service and redirect trusted internal requests to a...

EUVD-2026-69714

A server-side request forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause the Manage API to send crafted outbound requests to an attacker-controlled host. An unauthenticated endpoint parsed an attacker-supplied cluster...

EUVD-2026-69715

A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution. Exploitation required an authenticated user with write access to a repository and precise timing of concurrent upload requests. This vulnerability affected all...

CVE-2026-76851

A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed remote code execution on the instance. Insufficient network isolation allowed malicious pre-receive hook code to impersonate an internal service and redirect trusted internal requests to a...

CVE-2026-19118

A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution. Exploitation required an authenticated user with write access to a repository and precise timing of concurrent upload requests. This vulnerability affected all...

CVE-2026-18730

A server-side request forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause the Manage API to send crafted outbound requests to an attacker-controlled host. An unauthenticated endpoint parsed an attacker-supplied cluster...

CVE-2026-76851

A Server-Side Request Forgery (SSRF) vulnerability in GitHub Enterprise Server allowed remote code execution on the instance. The root cause was insufficient network isolation that permitted malicious pre-receive hook code to impersonate an internal service and redirect trusted internal requests ...

CVE-2026-76851 Server-Side Request Forgery vulnerability in GitHub Enterprise Server allowed remote code execution via network access from pre-receive hooks to internal services

A Server-Side Request Forgery SSRF vulnerability was identified in GitHub Enterprise Server that allowed remote code execution on the instance. Insufficient network isolation allowed malicious pre-receive hook code to impersonate an internal service and redirect trusted internal requests to a...

CVE-2026-19118 Race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution

A time-of-check time-of-use race condition vulnerability was identified in GitHub Enterprise Server that allowed remote code execution. Exploitation required an authenticated user with write access to a repository and precise timing of concurrent upload requests. This vulnerability affected all...

CVE-2026-19118

A time-of-check time-of-use (TOCTOU) race condition in GitHub Enterprise Server enabled remote code execution . Exploitation required an authenticated user with write access to a repository and precise timing of concurrent upload requests . All versions prior to 3.22 were affected; fixes are avai...