_git

cirosantilli · cirosantilli · commit 9c1a2557c002 · 2014-12-12T22:58:23.000+01:00
diff --git a/HEAD b/HEAD
@@ -0,0 +1 @@
+ref: refs/heads/master
diff --git a/README.md b/README.md
@@ -40,7 +40,7 @@ The most interesting files on this repository are:
 
 -   [issue-md.md](issue-markdown.md): test the markdown on issues
 
--   [filename/](filename/): weird stuff and attacks based on the filenames
+-   Weird stuff and attacks based on the filenames.
 
     The only filenames which are not valid are:
 
@@ -76,6 +76,10 @@ The most interesting files on this repository are:
         - [double whitespace directory name](%20%20/) and [its README](%20%20/README.md)
         - [a b](a b)
 
+-   Git directory inside Git directory: [_git](_git).
+
+    For further mischief, same files were copied on the top-level of the repository.
+
 Interesting branches and tags:
 
 -   [`hasslash/a`](../hasslash/a): branch inside sub-directory
diff --git a/_git/HEAD b/_git/HEAD
@@ -0,0 +1 @@
+ref: refs/heads/master
diff --git a/_git/README.md b/_git/README.md
@@ -0,0 +1,13 @@
+Git automatically treats certain directories as Git repositories when certain files are present.
+<http://stackoverflow.com/questions/2044574/determine-if-directory-is-under-git-control>
+
+In normal circumstances, this happens for test repos that are kept inside git related repositories,
+e.g. <https://github.com/schacon/grack/tree/613acd237ab7f522a02953c310aad0d484873bd7/tests/example>
+
+When there is a `.git` directory in the current directory,
+it takes precedence over the current directory being a bare repo:
+`git` commands without explicit `--git-dir` will use it.
+
+If however git finds a directory that it recognizes to be a git bare repo and there is no `.git`,
+it will be used. Try `git log` in this directory. If some system fails to check for that,
+it is a great vector for arbitrary code execution.
diff --git a/_git/objects/17/3a852893f2dac5b79dd5862e5a032777477567 b/_git/objects/17/3a852893f2dac5b79dd5862e5a032777477567
@@ -0,0 +1,2 @@
+x5��
+1=�+r��b6�_�n��������\g��o�k��<2I\W��}8�a�.~c 5����%��t����X�t�'���3��|�A��!W�
diff --git a/_git/objects/49/6d6428b9cf92981dc9495211e6e1120fb6f2ba b/_git/objects/49/6d6428b9cf92981dc9495211e6e1120fb6f2ba
diff --git a/_git/objects/e6/9de29bb2d1d6434b8b29ae775ad8c2e48c5391 b/_git/objects/e6/9de29bb2d1d6434b8b29ae775ad8c2e48c5391
diff --git a/_git/refs/heads/master b/_git/refs/heads/master
@@ -0,0 +1 @@
+173a852893f2dac5b79dd5862e5a032777477567
diff --git a/objects/17/3a852893f2dac5b79dd5862e5a032777477567 b/objects/17/3a852893f2dac5b79dd5862e5a032777477567
@@ -0,0 +1,2 @@
+x5��
+1=�+r��b6�_�n��������\g��o�k��<2I\W��}8�a�.~c 5����%��t����X�t�'���3��|�A��!W�
diff --git a/objects/49/6d6428b9cf92981dc9495211e6e1120fb6f2ba b/objects/49/6d6428b9cf92981dc9495211e6e1120fb6f2ba
diff --git a/objects/e6/9de29bb2d1d6434b8b29ae775ad8c2e48c5391 b/objects/e6/9de29bb2d1d6434b8b29ae775ad8c2e48c5391
diff --git a/refs/heads/master b/refs/heads/master
@@ -0,0 +1 @@
+173a852893f2dac5b79dd5862e5a032777477567

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	`+x5��`
	`2`	`+1=�+r��b6�_�n��\g��o�k��<2I\W��}8�a�.~c 5��%��t��X�t�'��3��\|�A��!W�`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+173a852893f2dac5b79dd5862e5a032777477567`