Git's recursive clones on case-insensitive filesystems that support symlinks are susceptible to Remote Code Execution
nvd · CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:HModerate · next 30 days
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a `.git/` directory. This allows writing a hook that will be executed while the clone operation is still running, giving the user no opportunity to inspect the code that is being executed. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. If symbolic link support is disabled in Git (e.g. via `git config --global core.symlinks false`), the described attack won't work. As always, it is best to avoid cloning repositories from untrusted sources.
Bash PoC for CVE-2024-32002 that exploits Git clone with malicious submodules and symlinks to execute arbitrary commands on Windows and macOS.
CVE-2024-32002 poc test
Exploit PoC for CVE-2024-32002
This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on case-insensitive filesystems to write files into the .git/ directory, leading to the execution of malicious hooks.
This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on case-insensitive filesystems to write files into the .git/ directory, leading to the execution of malicious hooks.
Proof-of-concept exploit for CVE-2024-32002, a Git RCE via crafted submodules on case-insensitive filesystems, demonstrating malicious hook execution during clone.
Exploit for CVE-2024-32002, a Git RCE vulnerability that uses recursive submodule cloning and symlinks to execute arbitrary commands on Windows and Linux targets.
Proof-of-concept exploit for CVE-2024-32002, demonstrating RCE via git clone with malicious submodules and symlinks on case-insensitive filesystems.
Proof-of-concept exploit for CVE-2024-32002, demonstrating remote code execution via malicious Git submodules on case-insensitive filesystems.
Proof of Concept for CVE-2024-32002: Git submodule path injection vulnerability.
A proof of concept for the git vulnerability CVE-2024-32002
CVE-2024-32002 RCE PoC
Este script demuestra cómo explotar la vulnerabilidad CVE-2024-32002 para obtener una reverse shell, proporcionando acceso remoto al sistema afectado. Úselo con precaución en entornos controlados y solo con fines educativos o de pruebas de seguridad.
Proof-of-concept exploit for CVE-2024-32002, a Git submodule vulnerability enabling arbitrary code execution via crafted repositories and symlinks.
cve-2024-32002yahhh
Proof-of-concept exploit for CVE-2024-32002, a Git RCE vulnerability, demonstrating arbitrary code execution through crafted submodules and repository cloning.
Shell-based exploit for CVE-2024-32002, a Git submodule RCE vulnerability, targeting Linux systems through crafted recursive clone operations.
Proof-of-concept exploit for CVE-2024-32002, a Git submodule vulnerability that enables remote code execution on Linux through crafted repositories.
Proof-of-concept exploit for CVE-2024-32002, a Git remote code execution vulnerability triggered when cloning a malicious repository.
Proof-of-concept exploit for CVE-2024-32002, a Git submodule remote code execution vulnerability, demonstrating malicious submodule-based clone attacks.
CVE-2024-32002-hook
Proof-of-concept exploit for CVE-2024-32002, a Git vulnerability that enables remote code execution via crafted recursive clone operations.
Proof-of-concept exploit for CVE-2024-32002, demonstrating the vulnerability and its impact.
Proof-of-concept demonstrating exploitation of CVE-2024-32002, a Git submodule vulnerability, for security research and testing.
Hook for the PoC for exploiting CVE-2024-32002
Exploit hook for CVE-2024-32002, a Git remote code execution vulnerability, providing a proof-of-concept implementation.
CVE-2024-32002 是 Git 中的一个严重漏洞，允许攻击者在用户执行 git clone 操作时远程执行任意代码（RCE）。
Local reproduction environment for CVE-2024-32002 Git RCE exploit using Gitea, with custom payload injection via post-checkout hooks and submodule path traversal.
Generates reverse shell payloads targeting the GitLab-shell vulnerability CVE-2024-32002 for exploitation testing.
Git clone Remote Code Execution exploit
submodule for git_rce
part of poc cve-2024-32002
poc of git rce using cve-2024-32002
Educational exploit script for CVE-2024-32002 (Git RCE) with automated setup, designed for CTF environments and security training.
Proof-of-concept exploit for CVE-2024-32002, a remote code execution vulnerability in Git. Demonstrates the attack vector and provides a working exploit for security testing and research.
A POC for CVE-2024-32002 demonstrating arbitrary write into the .git directory.
A submodule to demonstrate CVE-2024-32002. Demonstrates arbitrary write into .git.
Proof-of-concept demonstrating CVE-2024-32002 remote code execution via malicious Git submodule hook, targeting Windows and macOS systems.
Exploit for CVE-2024-32002, providing a proof-of-concept hook for vulnerability verification and penetration testing.
local poc for CVE-2024-32002
A submodule for exploiting CVE-2024-32002 vulnerability.
PoC for CVE-2024-32002: RCE via malicious git submodule hooks on case-insensitive filesystems
This is a demo for CVE-2024-32002 POC
PoC of CVE-2024-32002 - Remote Code Execution while cloning special-crafted local repositories
CVE-2024-32002 POC
CVE-2024-32002 hook POC
POC
Just small script to exploit CVE-2024-32002
Demonstration of CVE-2024-32002 exploitation with a Python-based proof-of-concept for vulnerability analysis and security testing.
Exploit for CVE-2024-32002 targeting Git hook vulnerabilities, enabling remote code execution via crafted repositories during clone operations.
Exploit implementation for CVE-2024-32002, providing a proof-of-concept for testing and validating the vulnerability in affected systems.
Proof of Concept for CVE-2024-32002
Proof-of-concept exploit for CVE-2024-32002, a Git remote code execution vulnerability, demonstrating exploitation techniques for security research.
Proof-of-concept exploit for CVE-2024-32002, a Git remote code execution vulnerability, demonstrating exploitation techniques for security research and testing.
PoC Exploit for CVE-2024-32002
PoC Exploit for CVE-2024-32002
This is the main repository for CVE 2024-32002, and requires recursive cloning because it contains the submodels necessary for execution.
hook repo for cve-2024-32002
Exploit tool targeting CVE-2024-32002 for vulnerability verification and security testing.
Advanced AI-Powered Exploitation Framework | CVE-2025-4664 & CVE-2025-2783 & CVE-2025-2857 & CVE-2025-30397 |
Repo for testing CVE-2024-32002
CVE-2024-32002-hook
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.