# imbas007/cve-2026-60004-poc architecture

> Architecture diagram of the GitHub repository imbas007/cve-2026-60004-poc, generated by GitDiagram from its file tree, README and a sample of source files (last updated 2026-09-29). It is an AI-made overview: check details against the source.

- Interactive diagram: https://gitdiagram.com/imbas007/cve-2026-60004-poc
- Repository: https://github.com/imbas007/cve-2026-60004-poc

## Overview

This repository is a Gitea CVE-2026-60004 assessment PoC: a Python tool supports detection and several exploitation workflows, while a Nuclei template provides a separate detection route. The README documents the end-to-end exploit and result retrieval; sampled Python excerpts confirm the HTTP wrapper, orchestration, registration, repository creation, and parts of detection and execution. Unsampled wiring is represented only where the README explicitly describes it.

Main entry points: [`cve-2026-60004-poc.py`](https://github.com/imbas007/cve-2026-60004-poc/blob/main/cve-2026-60004-poc.py) (Exploit engine), [`CVE-2026-60004.yaml`](https://github.com/imbas007/cve-2026-60004-poc/blob/main/CVE-2026-60004.yaml) (Nuclei template)

## Diagram (Mermaid)

```mermaid
flowchart TD

subgraph group_cli["Python PoC"]
  node_cli["CLI modes"]
  node_engine["Exploit engine"]
  node_http["HTTP client"]
end

subgraph group_workflow["Exploit workflow"]
  node_registration["User registration"]
  node_repository["Repository setup"]
  node_branch["Branch SHA lookup"]
  node_patch["Patch delivery"]
  node_hook["Git hook execution"]
  node_proof["Output proof branch"]
  node_result["Retrieved output"]
end

subgraph group_detection["Detection"]
  node_check["Endpoint and version checks"]
  node_nuclei["Nuclei template"]
end

node_operator(("Tester"))
node_target["Gitea server"]
node_scanner["Nuclei scanner"]

node_operator -->|"selects mode"| node_cli
node_cli -->|"dispatches"| node_engine
node_engine -->|"uses"| node_http
node_http -->|"sends requests"| node_target
node_engine -->|"registers user"| node_registration
node_registration -->|"submits form"| node_http
node_engine -->|"creates repository"| node_repository
node_repository -->|"submits API request"| node_http
node_engine -->|"gets commit SHA"| node_branch
node_branch -->|"requests branch"| node_http
node_engine -->|"sends patch"| node_patch
node_patch -->|"posts diffpatch"| node_http
node_target -->|"executes hook"| node_hook
node_hook -->|"stores command output"| node_proof
node_engine -->|"retrieves proof"| node_proof
node_proof -->|"reads raw endpoint"| node_http
node_engine -->|"runs checks"| node_check
node_check -->|"queries target"| node_http
node_operator -.->|"runs scan"| node_scanner
node_scanner -.->|"loads template"| node_nuclei
node_scanner -.->|"tests target"| node_target
node_http -->|"returns response"| node_result

click node_cli "https://github.com/imbas007/cve-2026-60004-poc/blob/main/cve-2026-60004-poc.py"
click node_engine "https://github.com/imbas007/cve-2026-60004-poc/blob/main/cve-2026-60004-poc.py"
click node_http "https://github.com/imbas007/cve-2026-60004-poc/blob/main/cve-2026-60004-poc.py"
click node_registration "https://github.com/imbas007/cve-2026-60004-poc/blob/main/cve-2026-60004-poc.py"
click node_repository "https://github.com/imbas007/cve-2026-60004-poc/blob/main/cve-2026-60004-poc.py"
click node_branch "https://github.com/imbas007/cve-2026-60004-poc/blob/main/cve-2026-60004-poc.py"
click node_patch "https://github.com/imbas007/cve-2026-60004-poc/blob/main/cve-2026-60004-poc.py"
click node_hook "https://github.com/imbas007/cve-2026-60004-poc/blob/main/cve-2026-60004-poc.py"
click node_proof "https://github.com/imbas007/cve-2026-60004-poc/blob/main/cve-2026-60004-poc.py"
click node_check "https://github.com/imbas007/cve-2026-60004-poc/blob/main/cve-2026-60004-poc.py"
click node_nuclei "https://github.com/imbas007/cve-2026-60004-poc/blob/main/CVE-2026-60004.yaml"

classDef toneNeutral fill:#f8fafc,stroke:#334155,stroke-width:1.5px,color:#0f172a
classDef toneBlue fill:#dbeafe,stroke:#2563eb,stroke-width:1.5px,color:#172554
classDef toneAmber fill:#fef3c7,stroke:#d97706,stroke-width:1.5px,color:#78350f
classDef toneMint fill:#dcfce7,stroke:#16a34a,stroke-width:1.5px,color:#14532d
classDef toneRose fill:#ffe4e6,stroke:#e11d48,stroke-width:1.5px,color:#881337
classDef toneIndigo fill:#e0e7ff,stroke:#4f46e5,stroke-width:1.5px,color:#312e81
classDef toneTeal fill:#ccfbf1,stroke:#0f766e,stroke-width:1.5px,color:#134e4a
class node_cli,node_engine,node_http toneBlue
class node_registration,node_repository,node_branch,node_patch,node_hook,node_proof,node_result toneAmber
class node_check,node_nuclei,node_target toneMint
class node_operator,node_scanner toneIndigo
```

## Components

### Python PoC

- [CLI modes](https://github.com/imbas007/cve-2026-60004-poc/blob/main/cve-2026-60004-poc.py): `cve-2026-60004-poc.py`
- [Exploit engine](https://github.com/imbas007/cve-2026-60004-poc/blob/main/cve-2026-60004-poc.py): `cve-2026-60004-poc.py`
- [HTTP client](https://github.com/imbas007/cve-2026-60004-poc/blob/main/cve-2026-60004-poc.py): `cve-2026-60004-poc.py`

### Exploit workflow

- [User registration](https://github.com/imbas007/cve-2026-60004-poc/blob/main/cve-2026-60004-poc.py): `cve-2026-60004-poc.py`
- [Repository setup](https://github.com/imbas007/cve-2026-60004-poc/blob/main/cve-2026-60004-poc.py): `cve-2026-60004-poc.py`
- [Branch SHA lookup](https://github.com/imbas007/cve-2026-60004-poc/blob/main/cve-2026-60004-poc.py): `cve-2026-60004-poc.py`
- [Patch delivery](https://github.com/imbas007/cve-2026-60004-poc/blob/main/cve-2026-60004-poc.py): `cve-2026-60004-poc.py`
- [Git hook execution](https://github.com/imbas007/cve-2026-60004-poc/blob/main/cve-2026-60004-poc.py): `cve-2026-60004-poc.py`
- [Output proof branch](https://github.com/imbas007/cve-2026-60004-poc/blob/main/cve-2026-60004-poc.py): `cve-2026-60004-poc.py`
- **Retrieved output**

### Detection

- [Endpoint and version checks](https://github.com/imbas007/cve-2026-60004-poc/blob/main/cve-2026-60004-poc.py): `cve-2026-60004-poc.py`
- [Nuclei template](https://github.com/imbas007/cve-2026-60004-poc/blob/main/CVE-2026-60004.yaml): `CVE-2026-60004.yaml`

### Other components

- **Tester**
- **Gitea server**
- **Nuclei scanner**

## Connections

- Tester → CLI modes: selects mode
- CLI modes → Exploit engine: dispatches
- Exploit engine → HTTP client: uses
- HTTP client → Gitea server: sends requests
- Exploit engine → User registration: registers user
- User registration → HTTP client: submits form
- Exploit engine → Repository setup: creates repository
- Repository setup → HTTP client: submits API request
- Exploit engine → Branch SHA lookup: gets commit SHA
- Branch SHA lookup → HTTP client: requests branch
- Exploit engine → Patch delivery: sends patch
- Patch delivery → HTTP client: posts diffpatch
- Gitea server → Git hook execution: executes hook
- Git hook execution → Output proof branch: stores command output
- Exploit engine → Output proof branch: retrieves proof
- Output proof branch → HTTP client: reads raw endpoint
- Exploit engine → Endpoint and version checks: runs checks
- Endpoint and version checks → HTTP client: queries target
- Tester → Nuclei scanner: runs scan
- Nuclei scanner → Nuclei template: loads template
- Nuclei scanner → Gitea server: tests target
- HTTP client → Retrieved output: returns response