Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-65964 — Educational CTF demo demonstrating command execution via Git hooks by abusing core.hooksPath in automation workflows. Highlights local hook execution and repository-contained hooks. | Kitploit
Tools/GitHubGitHub/saboor-hakimi-23/cve-2025-65964
ExploitationCTFCommand and ControlLearning & EducationPayload DevelopmentLabs & Practice
GitHubsaboor-hakimi-23/cve-2025-65964

CVE-2025-65964

Educational CTF demo demonstrating command execution via Git hooks by abusing core.hooksPath in automation workflows. Highlights local hook execution and repository-contained hooks.

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
View Repository
49 months agoNot yet reviewed
Share

n8n Git Hooks CTF Demo

⚠️ This repository is for educational and CTF demonstration purposes only.

Scenario

An automation platform (e.g., n8n) uses Git operations as part of a workflow. The workflow allows arbitrary Git configuration via git config.

An attacker-controlled workflow sets:

root@kitploit:~
core.hooksPath=hooks/

Git will then execute hooks from the repository directory.

Objective

Demonstrate that:

  • Git hooks are executed locally
  • Hooks can live inside the cloned repository
  • Misuse of core.hooksPath can lead to command execution

No harmful commands are included.

Download Tool