kw-structlog-config 0.0.1__tar.gz
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- kw_structlog_config-0.0.1/PKG-INFO +16 -0
- kw_structlog_config-0.0.1/README.md +6 -0
- kw_structlog_config-0.0.1/pyproject.toml +20 -0
- kw_structlog_config-0.0.1/setup.cfg +4 -0
- kw_structlog_config-0.0.1/src/kw_structlog_config/__init__.py +17 -0
- kw_structlog_config-0.0.1/src/kw_structlog_config.egg-info/PKG-INFO +16 -0
- kw_structlog_config-0.0.1/src/kw_structlog_config.egg-info/SOURCES.txt +7 -0
- kw_structlog_config-0.0.1/src/kw_structlog_config.egg-info/dependency_links.txt +1 -0
- kw_structlog_config-0.0.1/src/kw_structlog_config.egg-info/top_level.txt +1 -0
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
Metadata-Version: 2.4
|
|
2
|
+
Name: kw-structlog-config
|
|
3
|
+
Version: 0.0.1
|
|
4
|
+
Summary: Security research PoC - dependency confusion demonstration for HackerOne bug bounty (ferox0101)
|
|
5
|
+
Author-email: ferox0101 <ferox0101@wearehackerone.com>
|
|
6
|
+
License-Expression: MIT
|
|
7
|
+
Project-URL: Homepage, https://hackerone.com/ferox0101
|
|
8
|
+
Requires-Python: >=3.7
|
|
9
|
+
Description-Content-Type: text/markdown
|
|
10
|
+
|
|
11
|
+
# kw-structlog-config - Security Research PoC
|
|
12
|
+
|
|
13
|
+
**HackerOne bug bounty PoC by [ferox0101](https://hackerone.com/ferox0101)**
|
|
14
|
+
|
|
15
|
+
Demonstrates dependency confusion/typosquatting affecting Kiwi.com libraries.
|
|
16
|
+
This package is intentionally empty and harmless.
|
|
@@ -0,0 +1,20 @@
|
|
|
1
|
+
[build-system]
|
|
2
|
+
requires = ["setuptools>=68.0", "wheel"]
|
|
3
|
+
build-backend = "setuptools.build_meta"
|
|
4
|
+
|
|
5
|
+
[project]
|
|
6
|
+
name = "kw-structlog-config"
|
|
7
|
+
version = "0.0.1"
|
|
8
|
+
description = "Security research PoC - dependency confusion demonstration for HackerOne bug bounty (ferox0101)"
|
|
9
|
+
readme = "README.md"
|
|
10
|
+
license = "MIT"
|
|
11
|
+
authors = [
|
|
12
|
+
{name = "ferox0101", email = "ferox0101@wearehackerone.com"}
|
|
13
|
+
]
|
|
14
|
+
requires-python = ">=3.7"
|
|
15
|
+
|
|
16
|
+
[project.urls]
|
|
17
|
+
Homepage = "https://hackerone.com/ferox0101"
|
|
18
|
+
|
|
19
|
+
[tool.setuptools.packages.find]
|
|
20
|
+
where = ["src"]
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
"""
|
|
2
|
+
kw-structlog-config - Security Research PoC (ferox0101)
|
|
3
|
+
|
|
4
|
+
Dependency confusion PoC for HackerOne kiwicom program.
|
|
5
|
+
This is NOT an official Kiwi.com package.
|
|
6
|
+
Researcher: ferox0101 (https://hackerone.com/ferox0101)
|
|
7
|
+
"""
|
|
8
|
+
|
|
9
|
+
__version__ = "0.0.1"
|
|
10
|
+
__author__ = "ferox0101"
|
|
11
|
+
__poc__ = "HackerOne dependency confusion PoC - kiwicom program"
|
|
12
|
+
|
|
13
|
+
def poc():
|
|
14
|
+
print("[SECURITY PoC] Package 'kw-structlog-config' registered by ferox0101")
|
|
15
|
+
print("[SECURITY PoC] Dependency confusion vulnerability demonstration")
|
|
16
|
+
print("[SECURITY PoC] Report: HackerOne kiwicom program")
|
|
17
|
+
return True
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
Metadata-Version: 2.4
|
|
2
|
+
Name: kw-structlog-config
|
|
3
|
+
Version: 0.0.1
|
|
4
|
+
Summary: Security research PoC - dependency confusion demonstration for HackerOne bug bounty (ferox0101)
|
|
5
|
+
Author-email: ferox0101 <ferox0101@wearehackerone.com>
|
|
6
|
+
License-Expression: MIT
|
|
7
|
+
Project-URL: Homepage, https://hackerone.com/ferox0101
|
|
8
|
+
Requires-Python: >=3.7
|
|
9
|
+
Description-Content-Type: text/markdown
|
|
10
|
+
|
|
11
|
+
# kw-structlog-config - Security Research PoC
|
|
12
|
+
|
|
13
|
+
**HackerOne bug bounty PoC by [ferox0101](https://hackerone.com/ferox0101)**
|
|
14
|
+
|
|
15
|
+
Demonstrates dependency confusion/typosquatting affecting Kiwi.com libraries.
|
|
16
|
+
This package is intentionally empty and harmless.
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
kw_structlog_config
|