Attempt at querying the TP-link Archer C3200 API

cookie.js

const fs = require('fs');
function utf8_encode(string) {
	string = string.replace(/\\r\\n/g, "\\n");
	var utftext = "";

	for (var n = 0; n < string.length; n++) {
		var c = string.charCodeAt(n);
		if (c < 128) {
			utftext += String.fromCharCode(c);
		} else if ((c > 127) && (c < 2048)) {
			utftext += String.fromCharCode((c >> 6) | 192);
			utftext += String.fromCharCode((c & 63) | 128);
		} else {
			utftext += String.fromCharCode((c >> 12) | 224);
			utftext += String.fromCharCode(((c >> 6) & 63) | 128);
			utftext += String.fromCharCode((c & 63) | 128);
		}
	}
	return utftext;
}

function Base64Encoding(input) {
        var keyStr = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=";
        var output = "";
        var chr1, chr2, chr3, enc1, enc2, enc3, enc4;
        var i = 0;
        input = utf8_encode(input);
        while (i < input.length) {
            chr1 = input.charCodeAt(i++);
            chr2 = input.charCodeAt(i++);
            chr3 = input.charCodeAt(i++);
            enc1 = chr1 >> 2;
            enc2 = ((chr1 & 3) << 4) | (chr2 >> 4);
            enc3 = ((chr2 & 15) << 2) | (chr3 >> 6);
            enc4 = chr3 & 63;

            if (isNaN(chr2)) {
                enc3 = enc4 = 64;
            } else if (isNaN(chr3)) {
                enc4 = 64;
            }
            output = output + keyStr.charAt(enc1) + keyStr.charAt(enc2) + keyStr.charAt(enc3) + keyStr.charAt(enc4);
        }
        return output;
}

function auth_cookie ( username, password ) {
	const secret = Base64Encoding(username + ":" + password);
	const auth_string = "Basic " + secret;
	const cookie = "Authorization=" + auth_string;
	return cookie;
}

const input = fs.readFileSync('/dev/stdin').toString().split('\n');

switch (input.length) {
	case 0:
		console.log('Could not find username or password');
		process.exit(1);
		break;
	case 1:
		console.log('Could not find password');
		process.exit(2);
		break;
}

const username = input[0];
const password = input[1];
const cookie = auth_cookie(username, password);
console.log(cookie);

cookie.sh

#!/usr/bin/env sh


HOST=192.168.1.1
CGI="http://${HOST}/cgi"
BODY5="[LAN_HOST_ENTRY#0,0,0,0,0,0#0,0,0,0,0,0]0,0\n"
BODY6="[LAN_WLAN#0,0,0,0,0,0#0,0,0,0,0,0]0,3\nEnable\nX_TP_Band\nsubBand\n"

read secret

echo "$secret"

#curl -v -X POST 'http://192.168.1.1/cgi?7&7&7' --data-raw "$BODY777" \
	#-H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0' \
	#-H 'Accept: */*' \
	#-H 'Accept-Language: en-US,en;q=0.8,fr;q=0.5,ja;q=0.3' \
	#--compressed \
	#-H "Referer: http://${HOST}/" \
	#-H 'Content-Type: text/plain' \
	#-H 'DNT: 1' \
	#-H 'Connection: keep-alive' \
	#-H "Cookie: Authorization=Basic ${secret}" \
	#--data ''

#curl -v -X POST "$CGI?5" --data-raw "$BODY5" \
	#-H "Host: $HOST" \
	#-H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0' \
	#-H 'Accept: */*' \
	#-H 'Accept-Language: en-US,en;q=0.8,fr;q=0.5,ja;q=0.3' \
	#--compressed \
	#-H 'Accept-Encoding: gzip, deflate' \
	#-H "Referer: http://${HOST}/" \
	#-H 'Content-Type: text/plain' \
	#-H 'DNT: 1' \
	#-H 'Connection: keep-alive' \
	#-H "Cookie: Authorization=Basic ${secret}" \
	#-H 'Pragma: no-cache' \
	#-H 'Cache-Control: no-cache' \
	#-H 'Upgrade-Insecure-Requests: 1'

#curl -v -X POST "$CGI?6" --data-raw "$BODY6" \
	#-H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0' \
	#-H 'Accept: */*' \
	#-H 'Accept-Language: en-US,en;q=0.8,fr;q=0.5,ja;q=0.3' \
	#--compressed \
	#-H "Referer: http://${HOST}/" \
	#-H 'Content-Type: text/plain' \
	#-H 'DNT: 1' \
	#-H 'Connection: keep-alive' \
	#-H "Cookie: Authorization=Basic ${secret}"

wget "$CGI?5" --post-data "$BODY5" \
	--header "Host: $HOST" \
	--header 'User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0' \
	--header 'Accept: */*' \
	--header 'Accept-Language: en-US,en;q=0.8,fr;q=0.5,ja;q=0.3' \
	--header 'Accept-Encoding: gzip, deflate' \
	--header "Referer: http://${HOST}/" \
	--header 'Content-Type: text/plain' \
	--header 'DNT: 1' \
	--header 'Connection: keep-alive' \
	--header "Cookie: Authorization=Basic ${secret}" \
	--header 'Pragma: no-cache' \
	--header 'Cache-Control: no-cache' \
	--header 'Upgrade-Insecure-Requests: 1'

puppeteer.js

const puppeteer = require('puppeteer');

async function main () {
// Create browser instance, and give it a first tab
const options = {
executablePath: '/usr/bin/chromium' ,
//headless: false, // debug
//slowMo: 250,     // debug
} ;
    const browser = await puppeteer.launch(options);
    const page = await browser.newPage();

    // Allows you to intercept a request; must appear before
    // your first page.goto()
    await page.setRequestInterception(true);

await page.setExtraHTTPHeaders({
	"Host: $HOST" \
	'User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0' \
	'Accept: */*' \
	'Accept-Language: en-US,en;q=0.8,fr;q=0.5,ja;q=0.3' \
	'Accept-Encoding: gzip, deflate' \
	"Referer: http://192.168.1.1/" \
	'Content-Type: text/plain' \
	'DNT: 1' \
	'Connection: keep-alive' \
	"Cookie: Authorization=Basic ${secret}" \
	'Pragma: no-cache' \
	'Cache-Control: no-cache' \
	'Upgrade-Insecure-Requests: 1'
});

    // Request intercept handler... will be triggered with
    // each page.goto() statement
    page.on('request', interceptedRequest => {

        // Here, is where you change the request method and
        // add your post data
        var data = {
            'method': 'POST',
            'postData': '[LAN_HOST_ENTRY#0,0,0,0,0,0#0,0,0,0,0,0]0,0\r\n'
        };

        // Request modified... finish sending!
        interceptedRequest.continue(data);
    });

    // Navigate, trigger the intercept, and resolve the response
    const response = await page.goto('http://192.168.1.1/cgi?5');
    const responseBody = await response.text();
    console.log(responseBody);

    // Close the browser - done!
    await browser.close();

}

main().catch( err => {
console.log(err) ;
process.exit(100) ;
}) ;

I seem unable to replicate firefox's AJAX requests. I always get an error response. The puppeteer script was never finished.