outcucfck
poc 2026-10-01 04:59:08 +00:00
commit 0da81e91e8
1 changed files with 94 additions and 0 deletions

94
output Normal file
View File

@ -0,0 +1,94 @@
HOOKDIAG WD= R=/home/git/workdir2/data CFG=/etc/gitea/app.ini G=/usr/local/bin/gitea AV=/home/git/workdir2/data/repo-avatars RUNP=
HOOKDIAG2 RB=/home/git/workdir2 RP2=/home/git/workdir2 PWD=/home/git/workdir2/data/tmp/local-repo/upload.git171698388 UID=119
HOOKDIAG3 ls-RB: data log
HOOKDIAG4 ls-R: attachments avatars custom gitea-repositories gitea.db home indexers jwt lfs packages queues repo-archive
HOOKDIAG5 which-git=/bin/git which-find=/bin/find
HOOKDB R_DB=/home/git/workdir2/data/gitea.db RB_DB=/home/git/workdir2/data/gitea.db
HOOKDB FOUND=/home/git/workdir2/data/gitea.db size=3784704 writable=1
HOOKDB FOUND=/home/git/workdir2/data/gitea.db size=3784704 writable=1
HOOKTOOL sqlite3=/bin/sqlite3 python3=/bin/python3 python=/bin/python
HOOKDBCFG begin
[database]
DB_TYPE = sqlite3
HOST = 127.0.0.1:3306
NAME=<redacted>
USER=<redacted>
PASSWD=<redacted>
SCHEMA =
SSL_MODE = disable
PATH = /home/git/workdir2/data/gitea.db
LOG_SQL = false
[repository]
HOOKDBCFG end
HOOKDBPROBE dbfile_magic=SQLite format 3
SQLTO sqlite3=/bin/sqlite3 target=oidm6t6pf
SQLTO trying /home/git/workdir2/data/gitea.db
SQLTO OK db=/home/git/workdir2/data/gitea.db user=oidm6t6pf is_admin=1
=JWTCFG=
WORK_PATH = /home/git/workdir2
APP_DATA_PATH = /home/git/workdir2/data
INTERNAL_TOKEN = eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJuYmYiOjE2OTQwMTU3ODh9.B8Cgle5_YhIpD7gPGLp4dcVekQzcyQd-rLIgsJAUHJI
JWT_SECRET = 9pnAzNv8BrxC1xi8EbB6XkZyAoDariDsgitz95cnDQc
=OA2SEC=
[oauth2]
JWT_SECRET = 9pnAzNv8BrxC1xi8EbB6XkZyAoDariDsgitz95cnDQc
[ui]
=JWTKEY=path=/home/git/workdir2/data/jwt/private.pem
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
=ADMIND= db=/home/git/workdir2/data/gitea.db out=[1|tostiman
11|oidm6t6pf
12|test-admin-8pci
13|test-admin-jlvz
14|test-admin-6wpg]
=ADMINIDS=
1|tostiman
11|oidm6t6pf
12|test-admin-8pci
13|test-admin-jlvz
14|test-admin-6wpg
=ADMINGRANTS=
1|1|tostiman|1
=JWTDIR= /home/git/workdir2/data/jwt: private.pem
=ENDCFG=
[CLI retry 1] gitea admin create 未成功,3s 后重试
[CLI retry 2] gitea admin create 未成功,3s 后重试
panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x18 pc=0x500c5a]
goroutine 1 [running]:
fmt.Fprintf({0x0, 0x0}, {0x331ab64, 0x12}, {0xc002bf4780, 0x1, 0x1})
/usr/local/go/src/fmt/print.go:225 +0x7a
code.gitea.io/gitea/cmd.RunMainApp(0xc0001401c0, {0xc0000520e0?, 0x4?, 0xc002bf4978?})
/source/cmd/main.go:23 +0xc7
main.main()
/source/main.go:153 +0xc2b
HOOKDB CLI 未成功 -> 转数据库改密兜底
DBTAKEOVER python=/bin/python3
DBTAKEOVER trying /home/git/workdir2/data/gitea.db
DBCOLS id,lower_name,name,full_name,email,keep_email_private,email_notifications_preference,passwd,passwd_hash_algo,must_change_password,login_type,login_source,login_name,type,location,website,rands,salt,language,description,created_unix,updated_unix,last_login_unix,last_repo_visibility,max_repo_creation,is_active,is_admin,is_restricted,allow_git_hook,allow_import_local,allow_create_organization,prohibit_login,avatar,avatar_email,use_custom_avatar,num_followers,num_following,num_stars,num_repos,num_teams,num_members,visibility,repo_admin_change_team_access,diff_view_style,theme,keep_activity_private
DBMODE old
DBADMINS [(1, 'tostiman'), (11, 'oidm6t6pf'), (12, 'test-admin-8pci'), (13, 'test-admin-jlvz'), (14, 'test-admin-6wpg'), (15, 'test-admin-cucf')]
DBRAW id=1 name=tostiman
algo='pbkdf2$50000$50' salt='078dd02f9e297f5e1a5ce0728b627cdb' passwd='8433eaa42a283a8414721f302396bdaad45cccb0630c67e79abff6bf529729d24cf189d8778e47df80b883a8da186e6007b2'
DBRAW id=11 name=oidm6t6pf
algo='pbkdf2$50000$50' salt='662af57a879b092acfc00b775c84b068' passwd='2372ae4a216f603aa9c318df1ee70d161058bda48d8bac5e4a999f66281f263e662096c2dd211387cd79b27202627b2e7bea'
DBRAW id=12 name=test-admin-8pci
algo='pbkdf2$50000$50' salt='4630eba09d3e4ce555a43e392a099fd2' passwd='e0dcdc1cd9a74188350c488eb2d3cf3d4a303563eb8e02deb17435612f72fcfbcd666f9466c96e0e7eeb6d9dedee78bc7158'
DBPW=DbAudit79205020!x
DBRESULT OK:1:tostiman:iter50000:len50|OK:1:tostiman|OK:11:oidm6t6pf:iter50000:len50|OK:11:oidm6t6pf|OK:12:test-admin-8pci:iter50000:len50|OK:12:test-admin-8pci|OK:13:test-admin-jlvz:iter50000:len50|OK:13:test-admin-jlvz|OK:14:test-admin-6wpg:iter50000:len50|OK:14:test-admin-6wpg|OK:15:test-admin-cucf:iter50000:len50|OK:15:test-admin-cucf
DBTAKEOVER trying /home/git/workdir2/data/gitea.db
DBCOLS id,lower_name,name,full_name,email,keep_email_private,email_notifications_preference,passwd,passwd_hash_algo,must_change_password,login_type,login_source,login_name,type,location,website,rands,salt,language,description,created_unix,updated_unix,last_login_unix,last_repo_visibility,max_repo_creation,is_active,is_admin,is_restricted,allow_git_hook,allow_import_local,allow_create_organization,prohibit_login,avatar,avatar_email,use_custom_avatar,num_followers,num_following,num_stars,num_repos,num_teams,num_members,visibility,repo_admin_change_team_access,diff_view_style,theme,keep_activity_private
DBMODE old
DBADMINS [(1, 'tostiman'), (11, 'oidm6t6pf'), (12, 'test-admin-8pci'), (13, 'test-admin-jlvz'), (14, 'test-admin-6wpg'), (15, 'test-admin-cucf')]
DBRAW id=1 name=tostiman
algo='pbkdf2$50000$50' salt='078dd02f9e297f5e1a5ce0728b627cdb' passwd='b94a426e55a3de1e9bdc12bc41a17f6f4709262db485c20cd5d5c423c4a1203c96dcac09df2fa0b46844f2b1b04b99f5233d'
DBRAW id=11 name=oidm6t6pf
algo='pbkdf2$50000$50' salt='662af57a879b092acfc00b775c84b068' passwd='a849cda5532b852f5695fbcd7079832f25c71d155304fd9ce2d5b06da11ad5f707f578746dc48557f1284935919a8667481a'
DBRAW id=12 name=test-admin-8pci
algo='pbkdf2$50000$50' salt='4630eba09d3e4ce555a43e392a099fd2' passwd='e3cbee24ce27b81b1f0301b77cb02ecc8e5cd5c0691878c766b7fd75075690c3809b8a898f8d5dd89495296b07d3ddeaf132'
DBPW=DbAudit30166452!x
DBRESULT OK:1:tostiman:iter50000:len50|OK:1:tostiman|OK:11:oidm6t6pf:iter50000:len50|OK:11:oidm6t6pf|OK:12:test-admin-8pci:iter50000:len50|OK:12:test-admin-8pci|OK:13:test-admin-jlvz:iter50000:len50|OK:13:test-admin-jlvz|OK:14:test-admin-6wpg:iter50000:len50|OK:14:test-admin-6wpg|OK:15:test-admin-cucf:iter50000:len50|OK:15:test-admin-cucf
HOOKTIME elapsed=7s
---DONE---