waitload no working on headless #5600

p3tr0v · 2024-08-30T03:07:38Z

p3tr0v
Aug 30, 2024

Is there an existing issue for this?

I have searched the existing issues.

Current Behavior

I'm studying nuclei and trying to bruteforce my home TP-Link ADSL.
I have to use headless since every login the modem use a new random AES key.

The script emulate a browser interaction, then after sending the login it just close with no right response.
I'm using the default password, that is correct.
I have to look for a string that tells me the login was successful.
But nuclei just finish with no waitload for the response

My script:

id: tplink-headless

info:
  name: TP-Link bruteforce
  author: me
  severity: low
  description: TP-Link bruteforce.


headless:
  - steps:
        - args:
              url: "{{BaseURL}}"
          action: navigate
        - action: waitload
        - action: text
          args:
            by: x
            xpath: //*[@id="pc-login-password"]
            value: admin
        - action: click
          args: 
             by: xpath
             xpath: /html/body/div[3]/div[2]/div[2]/div[1]/div[2]/div[2]/div/div/div[1]/span[1]
        - action: click
          args:
             by: xpath  
             xpath: //*[@id="pc-login-btn"]
        - action: waitload

    matchers:
      - type: word
        words:
          - "$.ret=0;" # this value zero tells me he login was successful
        part: body

My command:
nuclei -u 10.1.1.1 -t projects/nuclei/tplink_bruteforce/tplink_bt_headless.yaml -v -headless -allow-local-file-access -show-browser

The result:

[VER] Started metrics server at localhost:9092
[INF] Current nuclei version: v3.3.1 (latest)
[INF] Current nuclei-templates version: v9.9.3 (latest)
[WRN] Scan results upload to cloud is disabled.
[INF] New templates added in latest release: 56
[INF] Templates loaded for current scan: 1
[WRN] Loading 1 unsigned templates for scan. Use with caution.
[INF] Targets loaded for current scan: 1
[INF] Running httpx on input host
[INF] Found 1 URL from httpx
[VER] Sent Headless request to http://10.1.1.1
[INF] No results found. Better luck next time!

Expected Behavior

Tell if bruteforce was success or not.

Steps To Reproduce

Save the yaml code then run wih he command line that i'm running.
You can inspect with wireshark

Relevant log output

No response

Environment

- OS: Parrot
- Nuclei: 3.3.1
- Go: go1.21.8 linux/amd64

Anything else?

No response

dwisiswant0 · 2024-09-02T11:57:12Z

dwisiswant0
Sep 2, 2024
Collaborator

Could you send an example of an HTML page to my Discord handle, @p3tr0v?

EDIT:

Or just paste it here. I'm going to try and reproduce it by mocking its page.

0 replies

p3tr0v · 2024-09-04T01:48:51Z

p3tr0v
Sep 4, 2024
Author

Hi @dwisiswant0 !
This is the HTML of the index login

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<head>
    <link rel="shortcut icon" type="image/x-icon" href="[../img/favicon.ico](view-source:http://94.183.157.201:8083/img/favicon.ico)">
    <link rel="stylesheet" href="[../css/main.css](view-source:http://94.183.157.201:8083/css/main.css)">
    <link rel="stylesheet" href="[../css/login.css](view-source:http://94.183.157.201:8083/css/login.css)">
    <link rel="stylesheet" href="[../css/jquery.tpInput.css](view-source:http://94.183.157.201:8083/css/jquery.tpInput.css)">
    <script src="[../js/jquery-1.8.3.min.js](view-source:http://94.183.157.201:8083/js/jquery-1.8.3.min.js)"></script>
    <script src="[../js/lib.js](view-source:http://94.183.157.201:8083/js/lib.js)"></script>
    <script src="[../locale/language.js](view-source:http://94.183.157.201:8083/locale/language.js)"></script>
    <script src="[../js/oid_str.js](view-source:http://94.183.157.201:8083/js/oid_str.js)"></script>
    <script src="[../js/locale.js](view-source:http://94.183.157.201:8083/js/locale.js)"></script>
    <script src="[../js/encrypt.js](view-source:http://94.183.157.201:8083/js/encrypt.js)"></script>
    <script src="[../js/jquery.tpInput.js](view-source:http://94.183.157.201:8083/js/jquery.tpInput.js)"></script>
	<script src="[../js/cryptoJS.min.js](view-source:http://94.183.157.201:8083/js/cryptoJS.min.js)"></script>
    <script src="[../js/tpEncrypt.js](view-source:http://94.183.157.201:8083/js/tpEncrypt.js)"></script>
    <!--[if lte IE 8]>
    <link href="./css/ie.css" rel="stylesheet" type="text/css"/>
    <style type="text/css">
        .input-err-container .input-err-delta, #pc-scroll div.widget-error-tips span.widget-error-tips-delta {
            top: 4px;
            left: 96px;
        }
        .input-container .input-err-container, .button-error-tips {
            left: -11px;
            top: 30px;
        }
        .input-container .input-wrapper {
            border-color: #b3b6b6;
        }
        .input-container.focus .input-wrapper {
            border-color: #74ccd1;
        }
        button.button-button {
            background: url("../img/ie.png") no-repeat -255px -32px;
        }
        button.button-button:hover {
            background: url("../img/ie.png") no-repeat 0px -32px;
        }
        #pc-scroll div.widget-error-tips div.widget-error-tips-wrap, .input-err-container .input-err-content {
            border: 0;
            box-shadow: none;
        }
        .shadow-top {
            background: url("../img/ie-01.png") repeat-x 0 -5px;
            top: -13px;
            left: 0;
            height: 13px;
            margin: 0 17px 0 17px;
        }
        .shadow-bot {
            background: url("../img/ie-01.png") repeat-x center bottom;
            bottom: -13px;
            left: 0;
            height: 13px;
            margin: 0 17px 0 17px;
        }
        .shadow-top-left, .shadow-top-right, .shadow-bot-left, .shadow-bot-right {
            position: absolute;
            width: 17px;
            height: 11px;
            background: url(../img/ie-06.png) no-repeat 0px -56px;
        }
        .shadow-top-left {
            background-position: 0px -56px;
            left: 4px;
            top: 4px;
        }
        .shadow-top-right {
            background-position: 0px -38px;
            right: 0;
            top: 3px;
        }
        .shadow-bot-left {
            background-position: 0px -76px;
            left: 3px;
            bottom: 8px;
        }
        .shadow-bot-right {
            background-position: 0px -95px;
            right: 0;
            bottom: 8px;
        }
        .shadow-left {
            padding-left: 11px;
            background: url(../img/ie-02.png) no-repeat 0px 0px;
        }
        .shadow-right {
            padding-right: 11px;
            background: url(../img/ie-02.png) no-repeat center right;
        }
    </style>
    <![endif]-->
</head>
<body>
<div id="cover" class="nd"></div>
<div id="mask" class="mask"></div>
<span class="load" style="display:none">for cache</span>
<div id="pc-div">
<div id="pc-top">
    <div id="pc-top-container">
        <a id="pc-top-product" href="[http://www.tp-link.com](view-source:http://www.tp-link.com/)" target="_blank">
            <span class="icon-logo"></span>
        </a>
    </div>
</div>
<div id="pc-scroll">
    <div id="pc-arrowBg"></div>
    <div id="pc-main">
        <div class="pc-login-content" id="pc-login">
            <div id="pc-login-forget" class="nd">
                <h4 id="pc-login-forget-title"></h4>
                <p id="pc-login-forget-text"></p>
                <div class="button-container">
                    <form class="pure-form">
                        <button type="submit" class="green T_save pure-button tp-btn-custom" id="pc-login-forget-back">
                            <span class="">Save</span></button>
                    </form>
                </div>
            </div>
            <div id="pc-login-main">
            <div class="pc-login-field nd" id="pc-login-user-div">
                <div class="pc-inputarea">
                    <label class="pc-login-username-label">
                        <span class="icon"></span>
                        <span class="text"></span>
                    </label>
                    <input type="text" id="pc-login-user" autocomplete="off">
                </div>
            </div>
            <div class="pc-login-field">
                <div class="pc-inputarea">
                    <label class="pc-login-password-label">
                        <span class="icon"></span>
                    </label>
                    <input type="password" id="pc-login-password" autocomplete="off">
                    <span class="pc-forgetPwd"><a href="[#](view-source:http://94.183.157.201:8083/#)" id="pc-login-forgetPwd">For get password</a></span>
                </div>
            </div>
            <div id="pc-login-submit">
                <div class="button-wrapper">
                    <button id="pc-login-btn" class="button-button" type="button">
                        <span class="text button-text">Log in</span>
                    </button>
                    <div class="button-error-tips widget-error-tips">
                        <div class="shadow-top-left"></div>
                        <div class="shadow-top"></div>
                        <div class="shadow-top-right"></div>
                        <div class="shadow-left">
                            <div class="shadow-right">
                                <span class="widget-error-tips-delta"></span>
                                <div class="widget-error-tips-wrap">
                                    <div class="content error-tips-content">
                                            <span class="errorContent"></span>
                                    </div>
                                </div>
                            </div>
                        </div>
                        <div class="shadow-bot-left"></div>
                        <div class="shadow-bot"></div>
                        <div class="shadow-bot-right"></div>
                    </div>
                </div>
            </div>
        </div>
        </div>
        <div class="pc-login-content nd" id="pc-setPwd">
            <div class="pc-login-field">
                <div class="pc-inputarea">
                    <label class="pc-login-password-label">
                        <span class="icon"></span>
                    </label>
                    <input type="password" id="pc-setPwd-new" autocomplete="off">
                </div>
            </div>
            <div id="pwdCheck" class="secLevel" style="">
                <span id="pwdCheck-low" class="level1 ori">Low</span>
                <span id="pwdCheck-middle" class="level2 ori">Middle</span>
                <span id="pwdCheck-high" class="level3 ori">High</span>
            </div>
            <div class="pc-login-field">
                <div class="pc-inputarea">
                    <label class="pc-login-password-label">
                        <span class="icon"></span>
                    </label>
                    <input type="password" id="pc-setPwd-confirm" autocomplete="off">
                </div>
            </div>
            <div>
                <div class="button-wrapper">
                    <button id="pc-setPwd-btn" class="button-button" type="button">
                        <span class="text button-text">Log in</span>
                    </button>
                    <div class="button-error-tips widget-error-tips">
                        <div class="shadow-top-left"></div>
                        <div class="shadow-top"></div>
                        <div class="shadow-top-right"></div>
                        <div class="shadow-left">
                            <div class="shadow-right">
                                <span class="widget-error-tips-delta"></span>
                                <div class="widget-error-tips-wrap">
                                    <div class="content error-tips-content">
                                        <span class="errorContent"></span>
                                    </div>
                                </div>
                            </div>
                        </div>
                        <div class="shadow-bot-left"></div>
                        <div class="shadow-bot"></div>
                        <div class="shadow-bot-right"></div>
                    </div>
                </div>
            </div>
        </div>
        <div id="pc-cloud" class="nd">
            <div id="cloud-bind-main" class="pc-login-content nd">
				<div id="login-bind-note-cnt">
                    <span class="text" id="login-bind-note"></span>
                </div>
                <div class="login-field">
				<div id="cloud-bind-user-div" class="pc-login-field nd">
                    <div class="pc-inputarea">
                        <label class="pc-login-username-label">
                            <span class="icon"></span>
							<span class="text"></span>
                        </label>
                        <input type="text" id="cloud-bind-user" autocomplete="off">
                    </div>
				</div>
                </div>
                <div class="pc-login-field">
                    <div class="pc-inputarea">
                        <label class="pc-login-password-label">
                            <span class="icon"></span>
							<span class="text"></span>
                        </label>
                        <input type="password" id="cloud-bind-password" autocomplete="off">
                    </div>
                </div>
                <div>
                    <div class="button-wrapper">
                        <button id="cloud-bind-btn" class="button-button" type="button">
                            <span class="text button-text">Bind</span>
                        </button>
                        <div class="button-error-tips widget-error-tips">
                            <div class="shadow-top-left"></div>
                            <div class="shadow-top"></div>
                            <div class="shadow-top-right"></div>
                            <div class="shadow-left">
                                <div class="shadow-right">
                                    <span class="widget-error-tips-delta"></span>
                                    <div class="widget-error-tips-wrap">
                                        <div class="content error-tips-content">
                                            <span class="errorContent"></span>
                                        </div>
                                    </div>
                                </div>
                            </div>
                            <div class="shadow-bot-left"></div>
                            <div class="shadow-bot"></div>
                            <div class="shadow-bot-right"></div>
                        </div>
                    </div>
                </div>
            </div>
			<div id="bound-error" class="nd">
                <div class="note"></div>
                <div class="switch-btn"></div>
            </div>
            <iframe frameborder="0" id="cloud-login" name="cloud-login" scrolling="no" class="nd"></iframe>
        </div>
    </div>
    <div id="pc-bottomContainer">
        <div id="pc-bottom">
            <span id="pc-bot-productName"></span>
            <span id="pc-bot-app"></span>
            <span id="pc-bot-modelDesc"></span>
        </div>
        <div class="pc-bottom-background"></div>
        <div class="qr-code-container login nd" id="qr-code-container">
            <div class="qr-code-container-wrapper">
                <div class="qr-code">
                    <span id="qr-close-icon" class="close-icon"></span>
                    <div class="characters-illustrate">
                        <span id="characters-illustrate-title" class="characters-illustrate-title"></span>
                        <span id="characters-illustrate-note" class="characters-illustrate-note"></span>
                    </div>
                    <span class="qr-code-picture"></span>
                    <div class="app-download-place">
                        <a href="[https://itunes.apple.com/us/app/tp-link-tether/id599496594?ls=1&mt=8](view-source:https://itunes.apple.com/us/app/tp-link-tether/id599496594?ls=1&mt=8)" target="_blank"><span class="apple-store"></span></a>
                        <a href="[https://play.google.com/store/apps/details?id=com.tplink.tether](view-source:https://play.google.com/store/apps/details?id=com.tplink.tether)" target="_blank"><span class="google-play"></span></a>
                    </div>
                </div>
                <div class="qr-code-container-delta"></div>
            </div>
        </div>
    </div>
</div>
</div>
<div id="alert-container" class="alert-container widget-container msg-container grid-popup-msg msg-container-center">
    <div class="msg-container-wrapper">
        <div class="position-top-left"></div>
        <div class="position-top-center"></div>
        <div class="position-top-right"></div>
        <div class="position-center-left">
            <div class="position-center-right">
                <div class="msg-wrap"><a class="widget-close msg-close" href="javascript:void(0);"></a>
                    <div class="msg-content-wrap">
                        <div class="widget-content msg-content-container">
                            <div class="grid-warning-msg"><span class="icon"></span><span class="text">The device will reboot. Are you sure to continue?</span>
                            </div>
                        </div>
                    </div>
                </div>
                <div class="msg-btn-container">
                    <div class="msg-btn-wrap">
                        <div class="button-container in-line">
                            <button type="button" class="button-button green pure-button btn-msg btn-msg-no btn-confirm" id="confirm-no">
                                <span>No</span></button>
                        </div>
                        <div class="button-container in-line">
                            <button type="button" class="button-button green pure-button btn-msg btn-msg-ok btn-confirm" id="confirm-yes">
                                <span>Yes</span></button>
                        </div>
                    </div>
                </div>
            </div>
        </div>
        <div class="position-bottom-left"></div>
        <div class="position-bottom-center"></div>
        <div class="position-bottom-right"></div>
    </div>
</div>
<div id="welcome" class="nd">
    <div class="wel-top">
        <div class="icon-router sprite o-network-router"></div>
        <div id="wel-usb" class="sprite icon icon-usb e-welcome-usb"></div>
        <div id="wel-wireless" class="sprite icon icon-wireless e-welcome-wireless"></div>
        <div id="wel-internet" class="sprite icon icon-internet e-welcome-internet"></div>
        <div id="wel-guest" class="sprite icon icon-guest e-welcome-guest"></div>
        <div id="wel-device" class="sprite icon icon-device e-welcome-device"></div>
        <div id="wel-phone" class="sprite icon icon-phone e-welcome-phone"></div>
    </div>
    <div id="wel-logo" class="sprite n-logoPhone"></div>
    <div class="company">TP-Link Corporation Limited.<br>All rights reserved</div>
</div>
<div id="ph-div" style="display:none">
    <div class="ph-header">
        <div class="ph-logo">
        </div>
    </div>
    <div class="ph-form">
        <form id="ph-setPwd">
            <div class="form-line">
                <span class="sprite c-login-password"></span>
                <input type="password" id="ph-setPwd-new" class="form-inputText" placeholder="New Password" autocomplete="off">
                <div class="errDivP mt11 nd">
                    <span class="sprite b-error-alert"></span>
                    <p class="errTextP">errTips</p>
                </div>
                <div id="passwordLevelP" class="password-level">
                    <span id="pwdCheckP-low" class="low">Low</span>
                    <span id="pwdCheckP-middle" class="middle">Middle</span>
                    <span id="pwdCheckP-high" class="high">High</span>
                </div>
            </div>
            <div class="mt11 form-line">
                <span class="sprite c-login-password"></span>
                <input type="password" id="ph-setPwd-confirm" class="form-inputText" placeholder="Confirm Password" autocomplete="off">
                <div class="errDivP mt11 nd">
                    <span class="sprite b-error-alert"></span>
                    <p class="errTextP">errTips</p>
                </div>
            </div>
            <div class="form-line mt20">
                <input type="button" id="ph-setPwd-btn" class="form-lgBt" value="Let's Get Started">
                <div id="ph-setPwd-note" class="noteDivP mt11">
                    <p class="errTextP">errTips</p>
                </div>
            </div>
        </form>
        <form id="ph-login" class="nd">
            <div class="mt11 form-line nd" id="ph-login-user-div">
                <span class="sprite c-login-account"></span>
            <input type="text" id="ph-login-user" class="form-inputText" placeholder="Username" autocomplete="off">
                <div class="errDivP mt11 nd">
                    <span class="sprite b-error-alert"></span>
                    <p class="errTextP"></p>
                </div>
            </div>
            <div class="mt11 form-line">
                <span class="sprite c-login-password"></span>
                <input type="password" id="ph-login-password" class="form-inputText" placeholder="Password" autocomplete="off">
                <div class="errDivP mt11 nd">
                    <span class="sprite b-error-alert"></span>
                    <p class="errTextP"></p>
                </div>
            </div>
            <div class="form-line mt20">
                <input type="button" id="ph-login-btn" class="form-lgBt" value="Login">
                <div id="ph-login-note" class="errDivP mt11 nd">
                    <span class="sprite b-error-alert"></span>
                    <p class="errTextP">errTips</p>
                </div>
            </div>
        </form>
        <form id="ph-cloud" class="nd">
            <div class="mt11 form-line" id="ph-cloud-user-div">
                <span class="sprite c-login-account"></span>
                <input type="text" id="ph-cloud-user" class="form-inputText" placeholder="Username" autocomplete="off">
                <div class="errDivP mt11 nd">
                    <span class="sprite b-error-alert"></span>
                    <p class="errTextP"></p>
                </div>
            </div>
            <div class="mt11 form-line">
                <span class="sprite c-login-password"></span>
                <input type="password" id="ph-cloud-password" class="form-inputText" placeholder="Password" autocomplete="off">
                <div class="errDivP mt11 nd">
                    <span class="sprite b-error-alert"></span>
                    <p class="errTextP"></p>
                </div>
            </div>
            <div class="form-line mt20">
                <input type="button" id="ph-cloud-btn" class="form-lgBt" value="Login">
                <div id="ph-cloud-note" class="errDivP mt11 nd">
                    <span class="sprite b-error-alert"></span>
                    <p class="errTextP">errTips</p>
                </div>
            </div>
        </form>
    </div>
    <div class="ph-bot">
        <a href="javascript:void(0);" id="pb-phone" class="ph-bot-phone selected"></a>
        <span>|</span>
        <a href="javascript:void(0);" id="pb-pc" class="ph-bot-pc"></a>
    </div>
</div>
<script>$(function(){var INCLUDE_LOGIN_USERNAME=0,isPhoneUI=!1,cloudLogined=!1,isCloudBind=!1,HTTP_ERR_USER_PWD_NOT_CORRECT=71233;INCLUDE_LOGIN_GDPR_ENCRYPT&&($.newencryptorManager=$.encrypt.encryptManager,$.newencryptorManager.cleanStorage(),$.Iencryptor=$.newencryptorManager.genEncryptor()),$.userInfo={},localStorage.removeItem("userInfo"),"https:"!=location.protocol&&"httpsLocalEnabled"in window&&"1"==httpsLocalEnabled&&(window.location.href="https://"+location.hostname+("httpsLocalPort"in window&&""==httpsLocalPort?"":":"+httpsLocalPort));try{$.locale.load(locale_language,null,null,!0)}catch(o){}var timesText=$.tpLang.login.timesText;$("#pc-top-product").attr("href",$.su.CHAR.SUPPORT[$.locale.locale.toUpperCase()]),$("#pc-login-btn,#pc-cloud-btn").html('<span class="text button-text">'+$.tpLang.login.login+"</span>"),$("#pc-setPwd-btn").html('<span class="text button-text">'+$.tpLang.login.start+"</span>"),$("#cloud-bind-btn").html('<span class="text button-text">'+$.tpLang.login.BIND+"</span>"),$("#pwdCheck-low").html($.tpLang.login.low),$("#pwdCheck-middle").html($.tpLang.login.middle),$("#pwdCheck-high").html($.tpLang.login.high),$("#pc-login-forget-text").html($.tpLang.login.forgetNote),$("#pc-login-forget-title").html($.tpLang.login.forgetPwd),$("#pc-login-forget-back").html('<span class="text button-text">'+$.tpLang.m_str.back+"</span>"),$("#pc-bot-app").html($.tpLang.qrApp.HELP_APP),$("span#characters-illustrate-title").html($.tpLang.qrApp.CHARACTERS_ILLUSTRETE_TITLE),$("span#characters-illustrate-note").html($.tpLang.qrApp.CHARACTERS_ILLUSTRETE_NOTE),$("#qr-close-icon").on("click",function(){$("#qr-code-container").slideUp(),document.cookie="qrClose=true"}),$("#pc-bot-app").on("click",function(){$("#qr-code-container").is(":visible")?($("#qr-code-container").slideUp(),document.cookie="qrClose=true"):($("#qr-code-container").slideDown(),$.deleteCookie("qrClose"))}),$("#pc-login-password").tpInput({placeholder:$.tpLang.login.password,parentClass:null,bubbleError:!0}),$("#pc-login-user").tpInput({placeholder:$.tpLang.login.userName,parentClass:null,bubbleError:!0}),$("#pc-setPwd-new").tpInput({placeholder:$.tpLang.login.newPassword,parentClass:null,bubbleError:!0}),$("#pc-setPwd-confirm").tpInput({placeholder:$.tpLang.login.confirmPassword,parentClass:null,bubbleError:!0}),$("#pb-phone").html($.tpLang.login.phone),$("#pb-pc").html($.tpLang.login.pc),$("#ph-setPwd-new").attr("placeholder",$.tpLang.login.newPassword),$("#ph-setPwd-confirm").attr("placeholder",$.tpLang.login.confirmPassword),$("#pwdCheckP-low").html($.tpLang.login.low),$("#pwdCheckP-middle").html($.tpLang.login.middle),$("#pwdCheckP-high").html($.tpLang.login.high),$("#ph-setPwd-btn").prop("value",$.tpLang.login.start),$("#ph-login-user").attr("placeholder",$.tpLang.login.userName),$("#ph-login-password").attr("placeholder",$.tpLang.login.password),$("#ph-login-btn").attr("value",$.tpLang.login.login),$("#ph-cloud-user").attr("placeholder",$.tpLang.login.email),$("#ph-cloud-password").attr("placeholder",$.tpLang.login.password),$("#ph-cloud-btn").attr("value",$.tpLang.login.login).on("click",function(){cloudSubmit(!0)});var PCSubWin=function(){};try{modelName&&(document.title=modelName,$("#pc-bot-productName").html(modelName),$("#pc-bot-modelDesc").html(modelDesc||""),$("#ph-productName").html(modelName))}catch(o){}var isLocked=!1,isMF=0;function buttonError(o,n,e){var t=$(o).next(".widget-error-tips");!1!==n?(0==t.length&&(t=$('<div class="button-error-tips widget-error-tips"><span class="widget-error-tips-delta"></span><div class="widget-error-tips-wrap"><div class="content error-tips-content"><span class="errorContent"></span></div></div></div>').insertAfter($(o))),t.show().find(".errorContent").html(n),$("body").off("click.buttonError"),!0!==e&&$("body").on("click.buttonError",function(){t.hide(),$("body").off("click.buttonError")})):t.hide()}$("body").on("keydown",function(o){13==o.keyCode&&PCSubWin(isMF)}),$("#pc-login-password").next("input").on("keydown",function(o){13==o.keyCode&&PCSubWin(isMF)}),$("#cloud-bind-password").next("input").on("keydown",function(o){13==o.keyCode&&PCSubWin(isMF)});var rsaEncrypt=$.rsa.encrypt,us;function lockWeb(o){$("#pc-login-password").tpInput("disabled",o),$("#pc-login-user").tpInput("disabled",o),$("#ph-login-password").prop("disabled",o),$("#ph-login-user").prop("disabled",o),$("#cloud-bind-password").tpInput("disabled",o),$("#cloud-bind-user").tpInput("disabled",o),$("#ph-cloud-password").prop("disabled",o),$("#ph-cloud-user").prop("disabled",o),$("#cloud-bind-password").tpInput("disabled",o)}function getHttpObject(o){var n=null;try{n=new XMLHttpRequest}catch(o){try{n=new ActiveXObject("Msxml2.XMLHTTP")}catch(o){try{n=new ActiveXObject("Microsoft.XMLHTTP")}catch(o){}}}return n.onreadystatechange=function(){4==n.readyState&&o&&o()},n}function getAuthParm(){var xmlHttpObj;xmlHttpObj=getHttpObject(function(){200!=xmlHttpObj.status&&(window.location.href=window.location.protocol+"//"+window.location.host)}),xmlHttpObj.open("POST",window.location.protocol+"//"+window.location.host+"/cgi/getParm?_="+ +new Date,!1),xmlHttpObj.send(null),eval(xmlHttpObj.responseText),$.nn=nn,$.ee=ee,us=userSetting,INCLUDE_LOGIN_GDPR_ENCRYPT&&($.seq=seq,$.Iencryptor.setSeq($.seq),$.Iencryptor.setRSAKey($.nn,$.ee))}function getBusy(callback){var xmlHttpObj,retry=0,sendCgi=function(){xmlHttpObj=getHttpObject(function(){200==xmlHttpObj.status?(eval(xmlHttpObj.responseText),callback.call(null,{isLogined:isLogined,isBusy:isBusy})):retry<1?(retry++,sendCgi()):window.location.href=window.location.protocol+"//"+window.location.host}),xmlHttpObj.open("POST",window.location.protocol+"//"+window.location.host+"/cgi/getBusy?_="+ +new Date,!!callback),xmlHttpObj.send(null)};if(sendCgi(),void 0===callback)return eval(xmlHttpObj.responseText),{isLogined:isLogined,isBusy:isBusy}}function inputError(o,n,e){!1===n?e?$(o).removeClass("err").next("div.errDivP").hide():$(o).tpInput("hideError"):!0===e?$(o).addClass("err").next("div.errDivP").show().find(".errTextP").html(n):$(o).tpInput("showError",n)}$("#pb-pc").on("click",function(){document.cookie="UserChange=true",window.location.href=window.location.protocol+"//"+window.location.host}),$("#ph-setPwd-new, #ph-setPwd-confirm, #ph-login-user, #ph-login-password, #ph-cloud-user, #ph-cloud-password").on("focus",function(){$(this).removeClass("err").next("div.errDivP").hide()}),$("#pb-phone").on("click",function(){$.deleteCookie("UserChange")}),null!=document.getElementById("mainBody")&&function(o,n,e,t){if($.local)location.reload(!0);else{var i=window.parent.location.href.match(/(https?):\/\/([^:\/]+)(:\d+)?\/?([^?]*)/);window.parent.location.href=i[1]+"://"+i[2]+(i[3]?i[3]:"")+"/"+(i[4]?i[4]:"")}}();var pwdCheckOK=!1;function doSetPassword(o,n){var e;if(0==us||3==us){if(e=getHttpObject(function(){200==e.status&&n&&n()}),null==$.nn&&getAuthParm(),INCLUDE_LOGIN_GDPR_ENCRYPT){$.Iencryptor.setHash("admin",o),$.Iencryptor.genAESKey(),$.newencryptorManager.recordEncryptor();var t=$.Iencryptor.AESEncrypt(o,1);e.open("POST",window.location.protocol+"//"+window.location.host+"/cgi/setPwd?pwd="+encodeURIComponent(t.data)+"&sign="+t.sign,!0)}else{var i=encodeURIComponent(rsaEncrypt($.Base64Encoding(o),$.nn,$.ee));e.open("POST",window.location.protocol+"//"+window.location.host+"/cgi/setPwd?pwd="+i,!0)}e.send(null)}}$("#pc-setPwd-btn").on("click",function(){setPwdSubmit()}),$("#pc-setPwd-confirm").on("ev_focus",function(){0==pwdCheckOK&&($("#pc-setPwd-new").tpInput("focus"),checkPwd())}),$("#pc-setPwd-new").on("keyup",function(){checkPwd()}),$("#ph-setPwd-btn").on("click",function(){setPwdSubmit(!0)}),$("#ph-setPwd-confirm").on("focus",function(){0==pwdCheckOK&&($("#ph-setPwd-new").focus(),checkPwd(!0))}),$("#ph-setPwd-new").on("keyup",function(){checkPwd(!0)});var setPwdFlag=0,setPwdSubmit=function(e){var o=$("#pc-setPwd-new"),n=$("#pc-setPwd-confirm"),t=o.tpInput("val"),i=n.tpInput("val");!0===e&&(o=$("#ph-setPwd-new"),n=$("#ph-setPwd-confirm"),t=o.val(),i=n.val()),""!=t?32<t.length?inputError(o,$.tpLang.login.tipsTextLength,e):""!=i?i==t?1!=setPwdFlag&&(setPwdFlag=1,doSetPassword(t,function(){null==$.nn&&getAuthParm();var o=rsaEncrypt($.Base64Encoding(t),$.nn,$.ee),n=rsaEncrypt("admin",$.nn,$.ee);INCLUDE_LOGIN_GDPR_ENCRYPT&&(o=$.Iencryptor.AESEncrypt("admin\n"+t,1),$.newencryptorManager.recordEncryptor()),doLogin(n,o,1,e,e?$("#ph-setPwd-btn"):$("#pc-setPwd-btn"))})):inputError(n,$.tpLang.login.tipsTextConfirm,e):inputError(n,$.tpLang.login.tipsText,e):inputError(o,$.tpLang.login.tipsText,e)};function checkPwd(o){var n=$("#pc-setPwd-new"),e=$("#pwdCheck"),t=n.tpInput("val");!0===o&&(n=$("#ph-setPwd-new"),e=$("#passwordLevelP"),t=n.val());var i=0,l=0,r=0,s=0,a=0;if(!1===/^(?=[^ ]+$)[\x21-\x7f]+$/.test(t))return e.removeClass("level1 level2 level3"),inputError(n,""==t?$.tpLang.login.tipsText:$.tpLang.login.tipsTextAscii,o),void(pwdCheckOK=!1);inputError(n,!1,o),i=/[A-Z]/.test(t)?1:0,l=/[a-z]/.test(t)?1:0,r=/\d/.test(t)?1:0,s=/(.[^a-zA-Z0-9])/.test(t)?1:0,a=i+l+r+(10<t.length?1:0)+s,t.length<=5?a<=2?e.removeClass("level2 level3").addClass("level1"):3!=a&&4!=a||e.removeClass("level1 level3").addClass("level2"):a<=1?e.removeClass("level2 level3").addClass("level1"):2==a||3==a?e.removeClass("level1 level3").addClass("level2"):4<=a&&e.removeClass("level2 level1").addClass("level3"),pwdCheckOK=!0}function initSetPwd(o){$("#pc-login").addClass("nd"),$("#pc-cloud").addClass("nd"),$("#pc-setPwd").removeClass("nd"),$("#qr-code-container").removeClass("nd"),buttonError($("#pc-setPwd-btn"),"<span class='red'>"+$.tpLang.login.notePart1+":</span> <br />"+$.tpLang.login.notePart2),$("#ph-setPwd").removeClass("nd"),$("#ph-login").addClass("nd"),$("#ph-cloud").addClass("nd"),$("#ph-setPwd-note").show().find(".errTextP").html("<span class='red'>"+$.tpLang.login.notePart1+":</span> <br />"+$.tpLang.login.notePart2)}function showWelcome(){$("#welcome").removeClass("nd"),$("#ph-div").addClass("nd");for(var e=["usb","wireless","internet","guest","device","phone"],t=0;t<e.length;t++)!function(){var o="wel-"+e[t],n=e[t]+"-show";setTimeout(function(){$("#"+o).addClass(n)},100*(t+1))}();setTimeout(function(){$("#wel-logo").addClass("logo-show")},1500),setTimeout(function(){showLoginMobile()},3500)}function showLoginMobile(){$("#welcome").addClass("nd"),$("#ph-div").removeClass("nd")}function initLogin(o){if($("#pc-div").removeClass("nd"),isCloudBind?($("#pc-login").addClass("nd"),$("#pc-cloud").removeClass("nd")):($("#pc-login").removeClass("nd"),$("#pc-cloud").addClass("nd")),$("#pc-setPwd").addClass("nd"),$("#ph-login").removeClass("nd"),$("#ph-setPwd").addClass("nd"),$("#ph-cloud").addClass("nd"),1==o&&0==authTimes?showWelcome():showLoginMobile(),INCLUDE_LOGIN_USERNAME&&($("#pc-login-user-div").removeClass("nd"),$("#ph-login-user-div").removeClass("nd"),$("#cloud-bind-user-div").removeClass("nd")),0==authTimes&&setErrorShowCookie(0),0<authTimes){var n=getErrorShowCookie(),e=$.tpLang.login.errorText;INCLUDE_LOGIN_USERNAME&&(e=$.tpLang.login.errorText2),authTimes>n&&(buttonError($("#pc-login-btn"),e),isCloudBind&&buttonError($("#cloud-bind-btn"),e),inputError($("#ph-login-password"),e,!0),setErrorShowCookie(authTimes)),INCLUDE_LOGIN_USERNAME&&$("#ph-login-password").removeClass("err")}if(5<=authTimes){lockWeb(isLocked=!0);var t=600-forbidTime;buttonError($("#pc-login-btn"),timesText.replace("$",t),!0),isCloudBind&&buttonError($("#cloud-bind-btn"),timesText.replace("$",t),!0),inputError($("#ph-login-password"),timesText.replace("$",t),!0),INCLUDE_LOGIN_USERNAME&&$("#ph-login-password").removeClass("err"),setErrorShowCookie(0),setTimeout(function(){if(t<1)return buttonError($("#pc-login-btn"),!1),isCloudBind&&buttonError($("#cloud-bind-btn"),!1),inputError($("#ph-login-password"),!1,!0),lockWeb(isLocked=!1),INCLUDE_LOGIN_USERNAME?(isMF&&$("#ph-login-user").focus(),isCloudBind?$("#cloud-bind-user").focus():$("#pc-login-user").focus()):(isMF&&$("#ph-login-password").focus(),isCloudBind?$("#cloud-bind-password").focus():$("#pc-login-password").focus()),void window.location.reload();t--,buttonError($("#pc-login-btn"),timesText.replace("$",t),!0),isCloudBind&&buttonError($("#cloud-bind-btn"),timesText.replace("$",t),!0),inputError($("#ph-login-password"),timesText.replace("$",t),!0),INCLUDE_LOGIN_USERNAME&&$("#ph-login-password").removeClass("err"),window.setTimeout(arguments.callee,1e3)},1e3)}else INCLUDE_LOGIN_USERNAME?(isMF&&$("#ph-login-user").focus(),isCloudBind?$("#cloud-bind-user").focus():$("#pc-login-user").focus()):isCloudBind?$("#cloud-bind-password").focus():$("#pc-login-password").focus()}$("#pc-login-password").on("ev_focus",function(){INCLUDE_LOGIN_USERNAME&&""==$("#pc-login-user").val()&&inputError($("#pc-login-user"),$.tpLang.login.tipsText)}),$("#pc-login-btn").on("click",function(){loginSubmit()}),$("#pc-login-forgetPwd").html($.tpLang.login.forgetPwd).on("click",function(o){$("#pc-login-forget").removeClass("nd"),$("#pc-login-main").addClass("nd")}),$("#pc-login-forget-back").on("click",function(o){return $("#pc-login-forget").addClass("nd"),$("#pc-login-main").removeClass("nd"),!1}),$("#ph-login-password").on("focus",function(){INCLUDE_LOGIN_USERNAME&&""==$("#ph-login-user").val()&&inputError($("#pc-login-user"),$.tpLang.login.tipsText,!0)}),$("#ph-login-btn").on("click",function(){loginSubmit(!0)});var loginFlag=0,loginSubmit=function(o){if(1!=isLocked){var n,e,t=$("#pc-login-password"),i=$("#pc-login-user"),l=$("#pc-login-password").tpInput("val");!0===o&&(t=$("#ph-login-password"),i=$("#ph-login-user"),l=t.val());var r=i.val();INCLUDE_LOGIN_USERNAME&&""==r?inputError(i,$.tpLang.login.tipsText,o):""!=l?32<l.length?inputError(t,$.tpLang.login.tipsTextLength,o):(null==$.nn&&getAuthParm(),1!=loginFlag&&(loginFlag=1,INCLUDE_LOGIN_GDPR_ENCRYPT?(INCLUDE_LOGIN_USERNAME||(r="admin"),$.Iencryptor.setHash(r,l),$.Iencryptor.genAESKey(),n=$.Iencryptor.AESEncrypt(r+"\n"+l,1),$.newencryptorManager.recordEncryptor()):(n=rsaEncrypt($.Base64Encoding(l),$.nn,$.ee),e=rsaEncrypt(INCLUDE_LOGIN_USERNAME?r:"admin",$.nn,$.ee)),doLogin(e,n,1,o,o?$("#ph-login-btn"):$("#pc-login-btn")))):inputError(t,$.tpLang.login.tipsText,o)}},token;function doLogin(name,auth,action,isMobile,btn,userInfo){isMobile?$.showCover():$.addLoading(btn);var xmlHttpObj=getHttpObject(function(){isMobile?$.hideCover():$.removeLoading(),eval(xmlHttpObj.responseText),HTTP_ERR_USER_PWD_NOT_CORRECT==$.ret?(authTimes=currAuthTimes,forbidTime=currForbidTime,isCloudBind=!$("#pc-cloud").hasClass("nd"),initPage(isMobile)):window.location.href=isMobile?window.location.protocol+"//"+window.location.host+"/index.mobile.htm":window.location.protocol+"//"+window.location.host});INCLUDE_LOGIN_GDPR_ENCRYPT?xmlHttpObj.open("POST",window.location.protocol+"//"+window.location.host+"/cgi/login?data="+encodeURIComponent(auth.data)+"&sign="+auth.sign+"&Action="+action+"&LoginStatus=0&isMobile="+(isMobile?"1":"0"),!0):null!=userInfo?xmlHttpObj.open("POST",window.location.protocol+"//"+window.location.host+"/cgi/login?UserName="+name+"&Passwd="+auth+"&Action="+action+"&cloudUserName="+$.Base64Encoding(userInfo.username)+"&Token="+userInfo.token+"&LoginStatus=0",!0):xmlHttpObj.open("POST",window.location.protocol+"//"+window.location.host+"/cgi/login?UserName="+name+"&Passwd="+auth+"&Action="+action+"&LoginStatus=0",!0),getBusy(function(o){0==o.isLogined?xmlHttpObj.send(null):tpConfirm($.tpLang.login.forceLogout,function(){if(isMobile?$.showCover():$.addLoading(btn),1==o.isBusy){var n=0,e=function(){getBusy(function(o){0==o.isBusy||2<=n?xmlHttpObj.send(null):(n++,setTimeout(e,1e3))})};setTimeout(e,1e3)}else xmlHttpObj.send(null)},function(){isMobile?$.hideCover():$.removeLoading()},null,$.tpLang.login.login,$.tpLang.m_str.cancel)})}function getErrorShowCookie(){for(var o="loginErrorShow=",n=document.cookie.split(";"),e=0;e<n.length;e++){var t=n[e].trim();if(0==t.indexOf(o))return t.substring(o.length,t.length)}return"0"}function setErrorShowCookie(o){document.cookie="loginErrorShow="+o}function tpConfirm(o,n,e,t,i,l){$("#mask").show();var r=$("#alert-container");isMF?r.addClass("ph"):r.removeClass("ph"),r.show().find(".grid-warning-msg span.text").html(o),$("#confirm-no").html("<span>"+(l||$.tpLang.m_str.cancel)+"</span>").off("click").on("click",function(){$("#alert-container").hide(),$("#mask").hide(),e&&e()}),$("#alert-container .msg-close").off("click").on("click",function(){$("#alert-container").hide(),$("#mask").hide(),e&&e()}),$("#confirm-yes").html("<span>"+(i||$.tpLang.m_str.ok)+"</span>").off("click").on("click",function(){$("#alert-container").hide(),$("#mask").hide(),n&&n()})}$("#cloud-bind-btn").on("click",function(){cloudSubmit()}),$("#cloud-bind-user").tpInput({placeholder:$.tpLang.login.email,parentClass:null,bubbleError:!0}),$("#cloud-bind-password").on("ev_focus",function(){""==$("#cloud-bind-user").tpInput("val")&&inputError($("#cloud-bind-user"),$.tpLang.login.tipsText)}).tpInput({placeholder:$.tpLang.login.password,parentClass:null,bubbleError:!0}),$("#pc-cloud-forgetPwd").html($.tpLang.login.forgetPwd).on("click",function(o){o.preventDefault(),onReceive({data:{eType:"ev_goto",url:"findBackPassword"},source:null,origin:"_self"})});var loginSwitchBtn=$('<div class="login-switch-btn"><span>'+$.tpLang.login.LOGIN_WITH_TPLINK_ID+'</span></div><div class="login-switch-note nd">'+$.tpLang.login.LOGIN_SWITCH_NOTE+"</div>");function getBindStatus(username,token){var xmlHttpObj;if(xmlHttpObj=getHttpObject(function(){200!=xmlHttpObj.status&&(window.location.href=window.location.protocol+"//"+window.location.host)}),INCLUDE_LOGIN_GDPR_ENCRYPT){var info,str=username+"&"+token;$.Iencryptor.setHash(username,token),$.Iencryptor.genAESKey(),info=$.Iencryptor.AESEncrypt(str,1),$.newencryptorManager.recordEncryptor(),xmlHttpObj.open("POST",window.location.protocol+"//"+window.location.host+"/cgi/getBindStatus?data="+encodeURIComponent(info.data)+"&sign="+info.sign,!1)}else xmlHttpObj.open("POST",window.location.protocol+"//"+window.location.host+"/cgi/getBindStatus?cloudUserName="+$.Base64Encoding(username)+"&Token="+token,!1);xmlHttpObj.send(null),eval(xmlHttpObj.responseText),$.BindStatus=BindStatus,$.Role=Role}function getEwebUrl(module){var xmlHttpObj;xmlHttpObj=getHttpObject(function(){200!=xmlHttpObj.status&&(window.location.href=window.location.protocol+"//"+window.location.host)}),xmlHttpObj.open("POST",window.location.protocol+"//"+window.location.host+"/cgi/getEwebUrl",!1),xmlHttpObj.send(null),eval(xmlHttpObj.responseText),$.cloudOrigin=EwebURL,$.cloudOrigin?$.setIframeSrc(module,!0):$(window).trigger("ev_watingTimeout")}function initCloud(){$("#pc-login").addClass("nd"),$("#pc-cloud").removeClass("nd"),$("#pc-setPwd").addClass("nd"),$("#ph-login").addClass("nd"),$("#ph-cloud").removeClass("nd"),$("#ph-setPwd").addClass("nd")}$("#pc-login-submit").append(loginSwitchBtn),$("span#login-bind-note").html($.tpLang.login.BIND_NOTE),$("#bound-error .note").text($.tpLang.login.BOUND_ERROR_NOTE),$("#bound-error .switch-btn").text($.tpLang.login.LOGIN_WITH_ROUTER_PASSWORD),$("#bound-error .switch-btn").click(function(){$("#bound-error").hide(),initLogin(isPhoneUI)}),$(".login-switch-btn").on("click",function(o){1!=isLocked&&($.addLoading(),null==$.nn&&getAuthParm(),isCloudBind=!1,$.checkCloudConn(function(){initCloud(),o.preventDefault(),$(".login-switch-note").hide(),onReceive({data:{eType:"ev_goto",url:"login"},source:null,origin:"_self"}),$.removeLoading()},function(){$(".login-switch-note").show(),$.removeLoading()}))});var cloudloginFlag=0,cloudSubmit=function(o){if(1!=isLocked){var n,e,t=$("#cloud-bind-password"),i=$("#cloud-bind-user"),l=t.tpInput("val"),r=i.tpInput("val"),s=$.userInfo;if(!0===o&&(t=$("#ph-cloud-password"),i=$("#ph-cloud-user"),l=t.val(),r=i.val()),INCLUDE_LOGIN_USERNAME&&""==r)inputError(i,$.tpLang.login.tipsText,o);else if(""!=l){if(32<l.length)inputError(t,$.tpLang.login.tipsTextLengthCloud,o);else if(INCLUDE_LOGIN_USERNAME||(r="admin"),null==$.nn&&getAuthParm(),1!=cloudloginFlag){if(cloudloginFlag=1,n=rsaEncrypt($.Base64Encoding(l),$.nn,$.ee),e=rsaEncrypt(r,$.nn,$.ee),INCLUDE_LOGIN_GDPR_ENCRYPT){var a=r+"\n"+l+"\n"+$.userInfo.username+"\n"+$.userInfo.token;$.Iencryptor.setHash(r,l),$.Iencryptor.genAESKey(),n=$.Iencryptor.AESEncrypt(a,1),$.newencryptorManager.recordEncryptor()}localStorage.setItem("userInfo",JSON.stringify(s)),doLogin(e,n,4,o,o?$("#ph-cloud-btn"):$("#pc-cloud-btn"),s)}}else inputError(t,$.tpLang.login.tipsText,o)}};function onReceive(o){var n=o.originalEvent||o;if(n.origin===$.cloudOrigin||"_self"===n.origin||null==n.origin){var e=n.data;if("string"==typeof n.data&&(e=$.parseJSON(e)),e)switch(e.eType){case"ev_login":e.validate&&(cloudLogined=!0,$.userInfo.username=e.email,$.userInfo.token=e.token,getBusy(function(o){0==o.isLogined?r():tpConfirm($.tpLang.login.forceLogout,function(){if($.addLoading(),1==o.isBusy){var n=0,e=function(){getBusy(function(o){0==o.isBusy||2<=n?r():(n++,setTimeout(e,1e3))})};setTimeout(e,1e3)}else r()},function(){$.removeLoading()},null,$.tpLang.login.login,$.tpLang.m_str.cancel)}));break;case"ev_goto":e.url?getEwebUrl(e.url):"login_switch"==e.index&&($("#cloud-login").hide(),initLogin(isPhoneUI)),"login"==e.url||"login"==e.index?($("#cloud-login").show(),$("#pc-cloud-form").hide()):"findBackPassword"!=e.url&&"findBackPassword"!=e.index||$.showLoading();break;case"load":(l={}).locale=locale_language||$.locale._findLocale(navigator.language||navigator.browserLanguage),l.force=!0,l.model=modelName,l.eType="ev_init";var t=JSON.stringify(l);window.frames["cloud-login"]&&window.frames["cloud-login"].postMessage(t,$.cloudOrigin),$.clearWaitingEvent(),$.getDeviceInfo(!1),$("#cloud-login").show();case"ev_reset":$.iframeResize($("#cloud-login"),e.height);break;case"ev_error":$("#cloud-login").attr("src","../main/offlineError.htm"),$("#cloud-login").css({height:300});break;case"ev_windowResize":var i=!1;try{window.frames["cloud-login"]&&window.frames["cloud-login"].name}catch(o){i=!0}if(i){var l;(l={eType:"ev_windowResize"}).windowHeight=$(window).height()-90,l.windowWidth=$(window).width(),l.iframeTop=$("#cloud-login").offset().top;t=JSON.stringify(l);window.frames["cloud-login"].postMessage(t,$.su.url.cloudOrigin)}}}function r(){$.addLoading(),setTimeout(function(){getBindStatus($.userInfo.username,$.userInfo.token),null!=$.BindStatus&&(1==$.BindStatus?(localStorage.setItem("userInfo",JSON.stringify($.userInfo)),$.refresh()):2==$.BindStatus?($("#cloud-login").hide(),$("#cloud-bind-main").show(),$("#bound-error").hide(),$.removeLoading()):3==$.BindStatus?1==$.Role?(localStorage.setItem("userInfo",JSON.stringify($.userInfo)),$.refresh()):($("#cloud-login").hide(),$("#cloud-bind-main").hide(),$("#bound-error").show(),$.removeLoading()):($.alert($.tpLang.m_str.unknown),$.removeLoading()))},0)}}function initPage(o){if(o){var n=document.createElement("script");n.type="text/javascript",n.innerHTML='var winX = $(window).width();var winY = $(window).height();var fontSize = 27 * ((winX < winY ? winX : winY) / 640);$("html").css("font-size", fontSize + "px");',$("head").append(n),$("#pc-div").hide(),$("#ph-div").show(),$("body").addClass("phoneBody")}else $("#pc-div").show(),$("#ph-div").hide(),$("body").removeClass("phoneBody");switch(setPwdFlag=loginFlag=cloudloginFlag=0,us){case 0:case 3:setErrorShowCookie(1),initSetPwd(o),PCSubWin=setPwdSubmit;break;case 2:case 1:default:initLogin(o),PCSubWin=loginSubmit}}function isMobile(){if(!("hasMobile"in window&&"1"===hasMobile))return!1;var o,n=!1;return o=navigator.userAgent||navigator.vendor||window.opera,(/(android|bb\d+|meego).+mobile|avantgo|bada\/|blackberry|blazer|compal|elaine|fennec|hiptop|iemobile|ip(hone|od)|iris|kindle|lge |maemo|midp|mmp|mobile.+firefox|netfront|opera m(ob|in)i|palm( os)?|phone|p(ixi|re)\/|plucker|pocket|psp|series(4|6)0|symbian|treo|up\.(browser|link)|vodafone|wap|windows ce|xda|xiino/i.test(o)||/1207|6310|6590|3gso|4thp|50[1-6]i|770s|802s|a wa|abac|ac(er|oo|s\-)|ai(ko|rn)|al(av|ca|co)|amoi|an(ex|ny|yw)|aptu|ar(ch|go)|as(te|us)|attw|au(di|\-m|r |s )|avan|be(ck|ll|nq)|bi(lb|rd)|bl(ac|az)|br(e|v)w|bumb|bw\-(n|u)|c55\/|capi|ccwa|cdm\-|cell|chtm|cldc|cmd\-|co(mp|nd)|craw|da(it|ll|ng)|dbte|dc\-s|devi|dica|dmob|do(c|p)o|ds(12|\-d)|el(49|ai)|em(l2|ul)|er(ic|k0)|esl8|ez([4-7]0|os|wa|ze)|fetc|fly(\-|_)|g1 u|g560|gene|gf\-5|g\-mo|go(\.w|od)|gr(ad|un)|haie|hcit|hd\-(m|p|t)|hei\-|hi(pt|ta)|hp( i|ip)|hs\-c|ht(c(\-| |_|a|g|p|s|t)|tp)|hu(aw|tc)|i\-(20|go|ma)|i230|iac( |\-|\/)|ibro|idea|ig01|ikom|im1k|inno|ipaq|iris|ja(t|v)a|jbro|jemu|jigs|kddi|keji|kgt( |\/)|klon|kpt |kwc\-|kyo(c|k)|le(no|xi)|lg( g|\/(k|l|u)|50|54|\-[a-w])|libw|lynx|m1\-w|m3ga|m50\/|ma(te|ui|xo)|mc(01|21|ca)|m\-cr|me(rc|ri)|mi(o8|oa|ts)|mmef|mo(01|02|bi|de|do|t(\-| |o|v)|zz)|mt(50|p1|v )|mwbp|mywa|n10[0-2]|n20[2-3]|n30(0|2)|n50(0|2|5)|n7(0(0|1)|10)|ne((c|m)\-|on|tf|wf|wg|wt)|nok(6|i)|nzph|o2im|op(ti|wv)|oran|owg1|p800|pan(a|d|t)|pdxg|pg(13|\-([1-8]|c))|phil|pire|pl(ay|uc)|pn\-2|po(ck|rt|se)|prox|psio|pt\-g|qa\-a|qc(07|12|21|32|60|\-[2-7]|i\-)|qtek|r380|r600|raks|rim9|ro(ve|zo)|s55\/|sa(ge|ma|mm|ms|ny|va)|sc(01|h\-|oo|p\-)|sdk\/|se(c(\-|0|1)|47|mc|nd|ri)|sgh\-|shar|sie(\-|m)|sk\-0|sl(45|id)|sm(al|ar|b3|it|t5)|so(ft|ny)|sp(01|h\-|v\-|v )|sy(01|mb)|t2(18|50)|t6(00|10|18)|ta(gt|lk)|tcl\-|tdg\-|tel(i|m)|tim\-|t\-mo|to(pl|sh)|ts(70|m\-|m3|m5)|tx\-9|up(\.b|g1|si)|utst|v400|v750|veri|vi(rg|te)|vk(40|5[0-3]|\-v)|vm40|voda|vulc|vx(52|53|60|61|70|80|81|83|85|98)|w3c(\-| )|webc|whit|wi(g |nc|nw)|wmlb|wonu|x700|yas\-|your|zeto|zte\-/i.test(o.substr(0,4)))&&(n=!0),isMF=n}function checkPlatform(){var o;(o=document.createElement("meta")).id="viewport",o.name="viewport",isMobile()&&-1===document.cookie.search("UserChange=true")?(o.content="width=device-width, minimum-scale=1, maximum-scale=1,user-scalable=no",$("head").append($(o)),initPage(isPhoneUI=!0)):($("head").append($(o)),initPage(!1))}$(window).on("ev_watingTimeout",function(){$.clearWaitingEvent(),$("#cloud-login").attr("src","../main/offlineError.htm"),$("#cloud-login").css({height:300}),$("#cloud-login").show(),$.removeLoading()}),$(window).on("message",onReceive),getAuthParm(),checkPlatform()})</script>
</body>
</html>
<script type="text/javascript"> var authTimes=0; var forbidTime=0; var modelName="TD-W9970"; var modelDesc="300Mbps Wireless N USB VDSL/ADSL Modem Router"; var locale_language=""; var hasMobile="1";</script>

Is it enough?

0 replies

p3tr0v · 2024-09-04T01:54:56Z

p3tr0v
Sep 4, 2024
Author

Inspecting by browser developer tools, after POST login, I got in response just the string "$.ret=0;"

0 replies

dwisiswant0 · 2024-09-04T13:02:22Z

dwisiswant0
Sep 4, 2024
Collaborator

I will investigate this.

0 replies

dwisiswant0 · 2024-09-04T13:15:15Z

dwisiswant0
Sep 4, 2024
Collaborator

What does this action do, @p3tr0v?

      - action: click
        args: 
           by: xpath
           xpath: /html/body/div[3]/div[2]/div[2]/div[1]/div[2]/div[2]/div/div/div[1]/span[1]

It seems like it's hanging during that action.

1 reply

p3tr0v Sep 4, 2024
Author

What does this action do, @p3tr0v?

      - action: click
        args: 
           by: xpath
           xpath: /html/body/div[3]/div[2]/div[2]/div[1]/div[2]/div[2]/div/div/div[1]/span[1]

It seems like it's hanging during that action.

It just click in the "eye" icon to show the password typed.
During my tests, I used the "show browser", then this step just show the password that was filled up by nuclei. you can just remove it and wont change the results.

dwisiswant0 · 2024-09-04T13:50:43Z

dwisiswant0
Sep 4, 2024
Collaborator

Here's a simple tip from me. If you want to make sure that your XPath I valid, try running evaluate in your browser's console. Example:

document.evaluate('YOUR_XPATH', document, null, XPathResult.FIRST_ORDERED_NODE_TYPE, null).singleNodeValue;

If it returns the element node itself, then you can be sure that it's valid. Based on what you've shared (#5584 (comment)), your current XPath is returning null.

I will convert this into a discussion.

4 replies

p3tr0v Sep 4, 2024
Author

All the Xpath is right, I could see on wireshark that the login was sent properly.. the problem is read the result.

dwisiswant0 Sep 9, 2024
Collaborator

How do you know that it's "right"? On my end, it’s returning null.

p3tr0v Sep 11, 2024
Author

I used developer tools from Firefox to get the Xpath, besides, I used show-browser option to see the interaction.

dwisiswant0 Sep 11, 2024
Collaborator

Yeah, but my question is; have you validated your XPath by running document.evaluate?

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

ProjectDiscovery

waitload no working on headless #5600

{{title}}

Replies: 6 comments 5 replies

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

Select a reply

ProjectDiscovery

waitload no working on headless #5600

p3tr0v Aug 30, 2024

Is there an existing issue for this?

Current Behavior

Expected Behavior

Steps To Reproduce

Relevant log output

Environment

Anything else?

Replies: 6 comments · 5 replies

dwisiswant0 Sep 2, 2024 Collaborator

p3tr0v Sep 4, 2024 Author

p3tr0v Sep 4, 2024 Author

dwisiswant0 Sep 4, 2024 Collaborator

dwisiswant0 Sep 4, 2024 Collaborator

p3tr0v Sep 4, 2024 Author

dwisiswant0 Sep 4, 2024 Collaborator

p3tr0v Sep 4, 2024 Author

dwisiswant0 Sep 9, 2024 Collaborator

p3tr0v Sep 11, 2024 Author

dwisiswant0 Sep 11, 2024 Collaborator

p3tr0v
Aug 30, 2024

Replies: 6 comments 5 replies

dwisiswant0
Sep 2, 2024
Collaborator

p3tr0v
Sep 4, 2024
Author

p3tr0v
Sep 4, 2024
Author

dwisiswant0
Sep 4, 2024
Collaborator

dwisiswant0
Sep 4, 2024
Collaborator

p3tr0v Sep 4, 2024
Author

dwisiswant0
Sep 4, 2024
Collaborator

p3tr0v Sep 4, 2024
Author

dwisiswant0 Sep 9, 2024
Collaborator

p3tr0v Sep 11, 2024
Author

dwisiswant0 Sep 11, 2024
Collaborator