lsd-cat

#!/usr/bin/env python3

# ctor -> arti onion service discovery key conversion script
# Usage: ./hss_ctor_to_arti.py <base32 secret> > /path/to/arti/keystore/client/<hsid>/ks_hsc_desc_enc.x25519_private
# <base32 secret> is the last part in the ctor client auth file
# <hsid> is the Onion Service hostname without .onion
# Any extra trailing space or newline at the end of the file will break the format
# <hsid> folder must be chmod 700
# ks_hsc_desc_enc.x25519_private must be chmod 600

lsd-cat

Gogs 0.13 (sqlite) to Gitea 1.0.2 (and upper)

Quoting the Gitea docs:

Upgrading from Gogs 0.12.x and above will be increasingly more difficult as the projects diverge further apart in configuration and schema.

Since gogs has now multiple unfixed RCEs and has for a while, it is imperative to either turn it off or migrate. The problem is, what to do if running a version > 0.11.x?

• https://www.sonarsource.com/blog/securing-developer-tools-unpatched-code-vulnerabilities-in-gogs-1/
• https://www.sonarsource.com/blog/securing-developer-tools-unpatched-code-vulnerabilities-in-gogs-2/
• https://fysac.github.io/posts/2024/11/unpatched-remote-code-execution-in-gogs/