How imbas007/cve-2026-60004-poc works
This repository is a Gitea CVE-2026-60004 assessment PoC: a Python tool supports detection and several exploitation workflows, while a Nuclei template provides a separate detection route. The README documents the end-to-end exploit and result retrieval; sampled Python excerpts confirm the HTTP wrapper, orchestration, registration, repository creation, and parts of detection and execution. Unsampled wiring is represented only where the README explicitly describes it.
Main entry points: cve-2026-60004-poc.py Exploit engine · CVE-2026-60004.yaml Nuclei template
Components 15
Python PoC
- CLI modes
cve-2026-60004-poc.py - Exploit engine
cve-2026-60004-poc.py - HTTP client
cve-2026-60004-poc.py
Exploit workflow
- User registration
cve-2026-60004-poc.py - Repository setup
cve-2026-60004-poc.py - Branch SHA lookup
cve-2026-60004-poc.py - Patch delivery
cve-2026-60004-poc.py - Git hook execution
cve-2026-60004-poc.py - Output proof branch
cve-2026-60004-poc.py - Retrieved output
Detection
- Endpoint and version checks
cve-2026-60004-poc.py - Nuclei template
CVE-2026-60004.yaml
Other components
- Tester
- Gitea server
- Nuclei scanner
Connections 22
- Tester → CLI modes: selects mode
- CLI modes → Exploit engine: dispatches
- Exploit engine → HTTP client: uses
- HTTP client → Gitea server: sends requests
- Exploit engine → User registration: registers user
- User registration → HTTP client: submits form
- Exploit engine → Repository setup: creates repository
- Repository setup → HTTP client: submits API request
- Exploit engine → Branch SHA lookup: gets commit SHA
- Branch SHA lookup → HTTP client: requests branch
- Exploit engine → Patch delivery: sends patch
- Patch delivery → HTTP client: posts diffpatch
- Gitea server → Git hook execution: executes hook
- Git hook execution → Output proof branch: stores command output
- Exploit engine → Output proof branch: retrieves proof
- Output proof branch → HTTP client: reads raw endpoint
- Exploit engine → Endpoint and version checks: runs checks
- Endpoint and version checks → HTTP client: queries target
- Tester → Nuclei scanner: runs scan
- Nuclei scanner → Nuclei template: loads template
- Nuclei scanner → Gitea server: tests target
- HTTP client → Retrieved output: returns response