CVE-2024-32002 PRC AW

A POC for CVE-2024-32002 demonstrating arbitrary write into the .git directory.

See cve-2024-32002-submodule-aw for the related submodule repository.

What this repo contains

• A symlink with an arbitraty name that links to the .git directory.
• A .gitmodules file that defines the malicious submodule.

How to recreate this repo

This repo was created in Linux (WSL2, to be specific). This is important, the malicious repo can only be created on a case-sensitive filesystem.

1. Create a symlink, using all lowercase characters

ln -s .git submodule

Notes:

• The symlink should point to the .git folder, since this is where we want to write files
• The symlink name (submodule) is arbitrary, but should start with a lowercase character
• This is important, because lowercase characters sort earlier than uppercase characters. When the clonong machine gets confused about where to write the submodule files, we want it to choose the symlink and not a normal directory.