CVE-2024-32002-Reverse-Shell

This script demonstrates how to exploit CVE-2024-32002 to obtain a reverse shell, providing remote access to the affected system. Use it with caution in controlled environments and only for educational or security testing purposes.

Blog Post

This script is inspired by the blog post: https://amalmurali.me/posts/git-rce. Here you will find more details about this vulnerability.

How it works

1. A malicious repository (git_rce) includes a submodule with a specially crafted path.
2. The submodule path uses a case variation that exploits the case-insensitive file system.
3. The submodule includes a symbolic link pointing to its .git/ directory, which contains a malicious link.
4. When the repository is cloned, the symbolic link is followed and the malicious link is executed, leading to RCE.

NOTE:

Affected and Patched Git Versions

Versions affected by the vulnerability:

• All versions prior to 2.45.1
• All versions prior to 2.44.1
• All versions prior to 2.43.4
• All versions prior to 2.42.2
• All versions prior to 2.41.1
• All versions prior to 2.40.2
• All versions prior to 2.39.4

Patched versions:

• 2.45.1
• 2.44.1
• 2.43.4
• 2.42.2
• 2.41.1
• 2.40.2
• 2.39.4

Execution

⚠️ Warning: Do not run this PoC on systems you do not own or for which you do not have explicit permission to use. Unauthorized testing may have unintended consequences.

bash pocgitreveshell.sh

Note: On Windows, you may need to run the shell as administrator for this to work.

What it looks like when running

And you will get the reverse shell

That's all for this PoC :)