#!/system/bin/sh
CURL=/system/bin/curl

echo "=== JSON RPC ==="
$CURL -sk -X POST "https://192.168.1.1/cgi-bin/luci/;stok=/login" \
  -H "Content-Type: application/json" \
  -d '{"method":"do","login":{"username":"admin"}}' 2>&1

echo ""
echo "=== form=auth ==="
$CURL -sk -X POST "https://192.168.1.1/cgi-bin/luci" \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "form=auth&operation=read" 2>&1

echo ""
echo "=== login.html RSA ==="
$CURL -sk "https://192.168.1.1/webpages/login.html" 2>&1 | \
  grep -oE '(rsa_n|rsa_e|N|E|seq)[^;]{0,100}' | head -10

echo ""
echo "=== Try passwords ==="
for PW in 99157425 admin 44935153; do
  RESP=$($CURL -sk -X POST "https://192.168.1.1/cgi-bin/luci/;stok=/login" \
    -H "Content-Type: application/json" \
    -d "{\"method\":\"do\",\"login\":{\"username\":\"admin\",\"password\":\"$PW\"}}" 2>&1)
  echo "PW=$PW: $RESP"
done

echo ""
echo "=== Stok path test ==="
$CURL -sk "https://192.168.1.1/cgi-bin/luci/;stok=/admin/system" \
  -H "Content-Type: application/json" \
  -d '{"method":"get","system":{}}' 2>&1 | head -3

echo "DONE"