ANSI terminal escape-sequence injection in Git sideband messages

This repository is a comprehensive Proof-of-Concept (PoC) for CVE-2024-52005, a high-severity vulnerability in Git that allows ANSI escape sequence injection via the sideband channel. The exploit targets systems (notably DHI container images such as ArgoCD, Jenkins, GitLeaks, etc.) that use vulnerable versions of Git and perform operations on untrusted repositories. The main exploit script (exploit_cve_2024_52005.py) provides a framework to generate malicious repositories and Git hooks with a variety of payloads, including color manipulation, hidden/invisible text, cursor movement, screen clearing, and social engineering messages. Supporting shell scripts (docker-test.sh, test_ansi_injection.sh) automate the process of creating test repositories, injecting malicious hooks, and verifying exploitation within containerized environments. The exploit demonstrates real-world attack scenarios such as CI/CD log poisoning, hiding vulnerabilities, and tricking users into running malicious commands. Multiple endpoints are referenced, including file paths for logs and repositories, as well as URLs used in social engineering payloads. The repository is well-documented, with detailed technical and quickstart guides, and is intended for authorized security testing and responsible disclosure.