08-15-2017, 04:09 PM
Nasli rupu u git-u dok dovlacite repozitorijum:
https://blogs.msdn.microsoft.com/vsoservice/?p=14655
![[Image: pwned-small1.gif]](https://msdnshared.blob.core.windows.net/media/2017/08/pwned-small1.gif)
https://blogs.msdn.microsoft.com/vsoservice/?p=14655
Quote:When fetching from remote repositories, Git URL parsing can be confused by command line options embedded inside the URL. This can be exploited to pass specific command-line options to the ssh executable, and those options may specify a command to execute using its “ProxyCommand” functionality.