Wietse Wind WietseWind

## index.html
<! -- Demo here: https://zoq4jb3.dlvr.cloud/index.html -->
<html>
  <head>
    <style>
      pre {
        border: 1px solid red;
        padding: 10px;
        margin: 10px;
      }
    </style>

## patch.sh
#!/bin/bash
# Detect CVE-2024-2961 and mitigage (tested: Ubuntu & Debian & Proxmox hosts)
# Wietse Wind 10-05-2024
#   Based on the idea from https://raw.githubusercontent.com/mattaperkins/FIX-CVE-2024-2961/main/fix.sh
#     ^^ Changes I made: auto detect file (several files eligible instead of one) & create back up of patched file
# Finds the right file and patches
# Safely run again to verify patch

# Run on host:
#   curl https://gist.githubusercontent.com/WietseWind/9fe2eda3fece426bf873a4aeb15c4267/raw/patch.sh | bash

## voucher-gen-claim.mjs
import {
  // generate,
  derive
} from 'xrpl-accountlib'

import rippleAddressCodec from 'ripple-address-codec'

import {
  sign,
  verify

## update.sh
update=2024.4.21-release+858

cd /opt/xahaud/downloads/ && \
wget https://build.xahau.tech/"$update" && \
cd /opt/xahaud/bin && \
service xahaud stop && \
rm xahaud && \
ln -s ../downloads/$update ./xahaud && \
chmod +x ./xahaud && service xahaud start

## index.js
const fs = require('fs')
const vm = require('vm')

const sandbox = {}

// https://cdn.jsdelivr.net/npm/xrpl-accountlib/dist/browser.min.js
vm.runInNewContext(fs.readFileSync('browser.min.js'), sandbox)

var AccountLib = sandbox.require('xrpl-accountlib')

## list_one.xml
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<ISO_4217 Pblshd="October 1, 2021">
	<CcyTbl>
		<CcyNtry>
			<CtryNm>AFGHANISTAN</CtryNm>
			<CcyNm>Afghani</CcyNm>
			<Ccy>AFN</Ccy>
			<CcyNbr>971</CcyNbr>
			<CcyMnrUnts>2</CcyMnrUnts>
		</CcyNtry>

## update.sh
update=2023.12.29-release+689

container=$(docker ps -a |grep xahau|cut -d " " -f 1)
build=$(docker exec -it $container /opt/xahaud/bin/xahaud -q --version|rev|cut -d "+" -f 1|rev|sed 's/[^0-9]*//g')
docker exec -it $container sh -c "curl https://build.xahau.tech/$update > /opt/xahaud/bin/new"
docker exec -it $container chmod +x /opt/xahaud/bin/new
newbuild=$(docker exec -it $container /opt/xahaud/bin/new -q --version|rev|cut -d "+" -f 1|rev|sed 's/[^0-9]*//g')

if [[ "$newbuild" -lt "$build" ]]; then
  echo "Not OK, $build gt $newbuild"

## generate20accounts.mjs
import { generate, utils, signAndSubmit } from 'xrpl-accountlib'

for (let i = 0; i < 20; i++) {
  const account = generate.familySeed({ algorithm: 'ed25519' })
  console.log(`${account.address}\t${account.secret.familySeed}\t${account.keypair.privateKey}`)
}

## b2m.mjs
import { derive, utils, signAndSubmit } from 'xrpl-accountlib'
import { TxData } from 'xrpl-txdata'
import { XrplClient } from 'xrpl-client'
import { xpop, setEndpoints as xpopEndpoints } from 'xpop'
import fetch from 'node-fetch'

// The above needs:
//   npm install xrpl-accountlib xrpl-txdata xrpl-client xpop node-fetch

const account = derive.familySeed('s....secret')

## mint.mjs
/// Based on: https://gist.github.com/N3TC4T/a20fb528931ed009ebdd708be4938748

import { derive, utils, signAndSubmit, } from "xrpl-accountlib"
import { XrplClient } from "xrpl-client"
import { decodeAccountID } from "ripple-address-codec"
import { TxData } from 'xrpl-txdata'

// const wss = [ 'wss://testnet.xrpl-labs.com', 'wss://s.altnet.rippletest.net:51233', ]
const wss = [ 'wss://s.devnet.rippletest.net:51233/' ]
const client = new XrplClient(wss)
	<! -- Demo here: https://zoq4jb3.dlvr.cloud/index.html -->
	<html>
	<head>
	<style>
	pre {
	border: 1px solid red;
	padding: 10px;
	margin: 10px;
	}
	</style>
	#!/bin/bash
	# Detect CVE-2024-2961 and mitigage (tested: Ubuntu & Debian & Proxmox hosts)
	# Wietse Wind 10-05-2024
	# Based on the idea from https://raw.githubusercontent.com/mattaperkins/FIX-CVE-2024-2961/main/fix.sh
	# ^^ Changes I made: auto detect file (several files eligible instead of one) & create back up of patched file
	# Finds the right file and patches
	# Safely run again to verify patch

	# Run on host:
	# curl https://gist.githubusercontent.com/WietseWind/9fe2eda3fece426bf873a4aeb15c4267/raw/patch.sh \| bash
	import {
	// generate,
	derive
	} from 'xrpl-accountlib'

	import rippleAddressCodec from 'ripple-address-codec'

	import {
	sign,
	verify
	update=2024.4.21-release+858

	cd /opt/xahaud/downloads/ && \
	wget https://build.xahau.tech/"$update" && \
	cd /opt/xahaud/bin && \
	service xahaud stop && \
	rm xahaud && \
	ln -s ../downloads/$update ./xahaud && \
	chmod +x ./xahaud && service xahaud start
	const fs = require('fs')
	const vm = require('vm')

	const sandbox = {}

	// https://cdn.jsdelivr.net/npm/xrpl-accountlib/dist/browser.min.js
	vm.runInNewContext(fs.readFileSync('browser.min.js'), sandbox)

	var AccountLib = sandbox.require('xrpl-accountlib')
	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
	<ISO_4217 Pblshd="October 1, 2021">
	<CcyTbl>
	<CcyNtry>
	<CtryNm>AFGHANISTAN</CtryNm>
	<CcyNm>Afghani</CcyNm>
	<Ccy>AFN</Ccy>
	<CcyNbr>971</CcyNbr>
	<CcyMnrUnts>2</CcyMnrUnts>
	</CcyNtry>
	update=2023.12.29-release+689

	container=$(docker ps -a \|grep xahau\|cut -d " " -f 1)
	build=$(docker exec -it $container /opt/xahaud/bin/xahaud -q --version\|rev\|cut -d "+" -f 1\|rev\|sed 's/[^0-9]*//g')
	docker exec -it $container sh -c "curl https://build.xahau.tech/$update > /opt/xahaud/bin/new"
	docker exec -it $container chmod +x /opt/xahaud/bin/new
	newbuild=$(docker exec -it $container /opt/xahaud/bin/new -q --version\|rev\|cut -d "+" -f 1\|rev\|sed 's/[^0-9]*//g')

	if [[ "$newbuild" -lt "$build" ]]; then
	echo "Not OK, $build gt $newbuild"
	import { generate, utils, signAndSubmit } from 'xrpl-accountlib'

	for (let i = 0; i < 20; i++) {
	const account = generate.familySeed({ algorithm: 'ed25519' })
	console.log(`${account.address}\t${account.secret.familySeed}\t${account.keypair.privateKey}`)
	}
	import { derive, utils, signAndSubmit } from 'xrpl-accountlib'
	import { TxData } from 'xrpl-txdata'
	import { XrplClient } from 'xrpl-client'
	import { xpop, setEndpoints as xpopEndpoints } from 'xpop'
	import fetch from 'node-fetch'

	// The above needs:
	// npm install xrpl-accountlib xrpl-txdata xrpl-client xpop node-fetch

	const account = derive.familySeed('s....secret')
	/// Based on: https://gist.github.com/N3TC4T/a20fb528931ed009ebdd708be4938748

	import { derive, utils, signAndSubmit, } from "xrpl-accountlib"
	import { XrplClient } from "xrpl-client"
	import { decodeAccountID } from "ripple-address-codec"
	import { TxData } from 'xrpl-txdata'

	// const wss = [ 'wss://testnet.xrpl-labs.com', 'wss://s.altnet.rippletest.net:51233', ]
	const wss = [ 'wss://s.devnet.rippletest.net:51233/' ]
	const client = new XrplClient(wss)