Skip to content

Commit

Permalink
Update gitea_lfs_rce.md
Browse files Browse the repository at this point in the history
  • Loading branch information
kacperszurek authored Jul 5, 2018
1 parent 18347c1 commit 7f6a2c8
Showing 1 changed file with 4 additions and 2 deletions.
6 changes: 4 additions & 2 deletions Gitea/gitea_lfs_rce.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,9 @@ This document is also available on [my website](https://security.szurek.pl/gitea

This is part 1 of 3 about bugs inside [Gitea](https://gitea.io/en-US/) and [Gogs](https://gogs.io/).

You can also watch explanation video on YouTube: [![Race condition and git hooks vs Gitea server](http://img.youtube.com/vi/X8gsRPZnmmY/0.jpg)](http://www.youtube.com/watch?v=a4aOaLfGqt8)
You can also watch explanation video on YouTube:

[![Race condition and git hooks vs Gitea server](http://img.youtube.com/vi/X8gsRPZnmmY/0.jpg)](http://www.youtube.com/watch?v=a4aOaLfGqt8)

Gitea is a simple git server written in Go language.

Expand Down Expand Up @@ -238,4 +240,4 @@ http://localhost:3000/root/test/objects/info/exploit
We managed to execute the code on the remote server without having a login and password.

# POC
[Gitea 1.4.0 Unauthenticated Remote Code Execution](https://github.com/kacperszurek/exploits/blob/master/Gitea/gitea_lfs_rce.py)
[Gitea 1.4.0 Unauthenticated Remote Code Execution](https://github.com/kacperszurek/exploits/blob/master/Gitea/gitea_lfs_rce.py)

0 comments on commit 7f6a2c8

Please sign in to comment.