Tools

eqstlab/cve-2026-6951

Proof-of-concept exploit for CVE-2026-6951, a simple-git --config filter bypass enabling RCE via the Git ext protocol, with a Docker lab and reverse…

george0papasotiriou/cve-2026-22004-git-lfs-pointer-poisoning-supply-chain-

Proof-of-concept for Git LFS pointer poisoning, with Bash and Python scripts that create a malicious repository, simulate a rogue LFS server, and…

thelastbyte/cve-2017-1000117

Proof-of-concept exploit for CVE-2017-1000117, a remote code execution vulnerability in git clients prior to v2.14.1, demonstrating recursive clone…

marsable/cve-2020-27955-lfs

RCE exploit for CVE-2020-27955 targeting Git LFS on Windows, with .bat and PowerShell payloads for testing Git, GitHub CLI, VS Code, and other tools.

chriswalker11/running-cve-2024-32002-locally-for-tesing

Local reproduction environment for CVE-2024-32002 Git RCE exploit using Gitea, with custom payload injection via post-checkout hooks and submodule…

marcotondolo/cve-2025-48384-poc

Proof-of-concept exploit for CVE-2025-48384, a Git submodule vulnerability leading to remote code execution through a malicious post-checkout hook.

charlesgargasson/cve-2024-32002

Exploit for CVE-2024-32002, a Git RCE vulnerability that uses recursive submodule cloning and symlinks to execute arbitrary commands on Windows and…

arnoldqqq/cve-2020-27955

Exploit for CVE-2020-27955, a Git LFS remote code execution vulnerability, with a .bat/powershell payload targeting Windows Git clients.

tsy244/cve-2024-32002-git-rce-father-poc

Proof-of-concept exploit for CVE-2024-32002, a Git remote code execution vulnerability, demonstrating exploitation techniques for security research…

blackninja23/cve-2024-32002

Proof-of-concept exploit for CVE-2024-32002, a Git RCE via crafted submodules on case-insensitive filesystems, demonstrating malicious hook execution…

saleha-muzammil/cve-2024-10220-git-on-git

Exploit implementation for CVE-2024-10220 targeting a Git vulnerability. Provides a proof-of-concept shell script for testing and educational…

dsnezhkov/octohook

Git Web Hook Tunnel for C2

10cks/cve-2024-32002-exp

Bash PoC for CVE-2024-32002 that exploits Git clone with malicious submodules and symlinks to execute arbitrary commands on Windows and macOS.

jongmartinez/cve-2018-11235-poc

PoC exploit for CVE-2018-11235 allowing RCE on git clone --recurse-submodules

iansmith123/cve-2020-27955

Proof-of-concept exploit for CVE-2020-27955, a remote code execution vulnerability in Git LFS. Demonstrates exploitation technique for security…

yym8538/cve-2026-60004

Automated proof-of-concept exploit for CVE-2026-60004, a Gitea diffpatch Git hook RCE that plants a post-index-change hook to gain a reverse shell as…

ashutosh0408/cve-2024-32002-poc

This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting…