CVE-2020-14144

This PoC exploits CVE-2020-14144 in GiTea by leveraging git hooks to achieve authenticated remote code execution. It automates repository creation, git hook manipulation, and payload delivery via git push.

This repository contains a functional Python exploit for CVE-2020-14144, which allows authenticated users with git hook permissions to achieve remote code execution on Gitea instances. The exploit automates the creation of a malicious git hook and triggers it via a git push.

This Metasploit module exploits CVE-2020-14144 in Gitea by leveraging insecure git hooks to achieve remote code execution. It authenticates, creates a repository, sets a malicious post-receive hook, and triggers it by creating a dummy file.