/CVE-2018-11235-PoC

PoC exploit for CVE-2018-11235 allowing RCE on git clone --recurse-submodules

PoC exploit for CVE-2018-11235

repository: http://REDACTED/2018-11235_PoC.git/
return: 
Submodule 'aaa' (https://repo1) registered for path 'aaa' 
Submodule '../../fakegit/modules/evil' (https://repo2) registered for path 'evil' 
Submodule path 'aaa': checked out '9c48e0a785dec84cb252677a8a7d55feaeac056c' 
Submodule path 'evil': checked out '9c48e0a785dec84cb252677a8a7d55feaeac056c' 

As Github prevents me of uploading the PoC

You will have to host your own repository, I managed to that by created a local repository using git init . --bare