Gogs RCE II

Bookmarked!

This exercise covers how to get code execution against the Git self hosted tool: Gogs.

PRO Hard < 1 Hr. 621 Green Badge
Course

This course demonstrates the exploitation of a remote command execution (RCE) vulnerability in Gogs, a tool for hosting git repositories. The attack involves bypassing authentication to gain administrator access and using git hooks to execute commands on the server.

Injection Authentication Operating System
CWE-94
Full course content 2 videos Common mistakes

Ready to practice?

Get access to this lab and 600+ hands-on exercises with a PRO subscription.