#!/system/bin/sh
C=/system/bin/curl
COOK=/data/local/tmp/tp_cook.txt
ROUTER=https://192.168.1.1

# Step 1: GET login page (init session cookie)
$C -sk -c "$COOK" -b "$COOK" "$ROUTER/webpages/login.html" -o /dev/null 2>&1
echo "COOKIES:"
cat "$COOK" 2>/dev/null

# Step 2: form=auth → RSA key
echo "=== form=auth ==="
$C -sk -c "$COOK" -b "$COOK" \
  -X POST "$ROUTER/cgi-bin/luci" \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -H "Referer: $ROUTER/webpages/login.html" \
  -d "form=auth&operation=read" 2>&1
echo ""

# Step 3: GET /cgi-bin/luci directly
echo "=== GET /cgi-bin/luci ==="
$C -sk -c "$COOK" -b "$COOK" \
  "$ROUTER/cgi-bin/luci" 2>&1 | head -5
echo ""

# Step 4: RSA N из login.js
echo "=== login JS files ==="
for F in login.js rsa.js encrypt.js crypto.js; do
  RES=$($C -sk "$ROUTER/webpages/$F" 2>/dev/null | head -3)
  if [ -n "$RES" ]; then echo "$F: $RES"; fi
done

# Step 5: Probe /cgi-bin/luci/;stok=/ (stok blank)
echo "=== blank stok test ==="
$C -sk -c "$COOK" -b "$COOK" \
  -X POST "$ROUTER/cgi-bin/luci/;stok=/" \
  -H "Content-Type: application/json" \
  -d '{"method":"do","login":{}}' 2>&1
echo ""

# Step 6: check what JS files exist (login page links)
echo "=== JS links ==="
$C -sk "$ROUTER/webpages/login.html" 2>/dev/null | grep -oE 'src="[^"]*"' | head -10

echo DONE