From 0bd792b56a1e48571545d547879504124262a15b Mon Sep 17 00:00:00 2001
From: Shihaam Abdul Rahman <shihaam@shihaam.me>
Date: Mon, 29 May 2023 01:10:41 +0500
Subject: [PATCH] i have more questions than answers

---
 routerapi.sh  | 12 ++++++------
 routerapi2.sh | 24 ++++++++++++++++++++++--
 2 files changed, 28 insertions(+), 8 deletions(-)

diff --git a/routerapi.sh b/routerapi.sh
index 1f9522f..16b8fd4 100755
--- a/routerapi.sh
+++ b/routerapi.sh
@@ -24,9 +24,9 @@ echo $token_start
 echo $token_end
 
 
-curl -s -b .cookie "$ROUTER_ADDRESS/api/user/challenge_login" \
-  -H "Origin: $ROUTER_ADDRESS" \
-  -H "Referer: $ROUTER_ADDRESS/html/home.html" \
-  -H "_ResponseSource: Broswer" \
-  -H "__RequestVerificationToken: $token_end" \
-  --data-raw "<?xml version="1.0" encoding="UTF-8"?><request><username>admin</username><firstnonce>58eb18b0cf49b69cb2b5b6204d32394a464ca082c0cb5a80b51811883cf4f076</firstnonce><mode>1</mode></request>" \
+#curl -s -b .cookie "$ROUTER_ADDRESS/api/user/challenge_login" \
+#  -H "Origin: $ROUTER_ADDRESS" \
+#  -H "Referer: $ROUTER_ADDRESS/html/home.html" \
+#  -H "_ResponseSource: Broswer" \
+#  -H "__RequestVerificationToken: $token_end" \
+#  --data-raw "<?xml version="1.0" encoding="UTF-8"?><request><username>admin</username><firstnonce>58eb18b0cf49b69cb2b5b6204d32394a464ca082c0cb5a80b51811883cf4f076</firstnonce><mode>1</mode></request>" \
diff --git a/routerapi2.sh b/routerapi2.sh
index 860efa7..3dac440 100755
--- a/routerapi2.sh
+++ b/routerapi2.sh
@@ -22,16 +22,36 @@ passhash=$hash2
 }
 
 gen_login_body(){
-body=$(echo "<?xml version=\"1.0\" encoding=\"UTF-8\"?><request><username>$ROUTER_USERNAME</username><password_type>$password_type</password_type><password>$passhash")
+body=$(echo "<?xml version=\"1.0\" encoding=\"UTF-8\"?><request><username>$ROUTER_USERNAME</username><password_type>4</password_type><password>$passhash")
 }
 
+login(){
+curl -s $ROUTER_ADDRESS/api/user/login \
+	-H 'Content-Type: application/x-www-form-urlencoded; charset=UTF-8' \
+	-H "Cookie: SessionID=$SesInfo" \
+	-H "__RequestVerificationToken: $TokInfo" \
+	--data-raw $body
+}
+
+
+
+#disable_data(){
+#curl -s $ROUTER_ADDRESS/api/user/login \
+#        -H 'Content-Type: application/x-www-form-urlencoded; charset=UTF-8' \
+#        -H "Cookie: SessionID=$SesInfo" \
+#        -H "__RequestVerificationToken: $TokInfo" \
+#}
+
 # exec oder
 SesTokInfo_req
 gen_pass_hash
-
+gen_login_body
+login
 
 # debug
 echo $TokInfo
 echo $SesInfo
 echo $passhash
 echo $body
+
+