#!/bin/bash
# V-001 Stage 1 (修正版)：curl 直接抓，不依赖 whatweb
set -e
OUT="/root/pentest_reports/oppo_V-001"
mkdir -p "$OUT"

echo "===[1.1] curl -I https://id-sso.xiniaoyun.com ==="
curl -sI "https://id-sso.xiniaoyun.com" --max-time 15 2>&1 | head -25

echo ""
echo "===[1.2] curl -I https://www.coloros.com ==="
curl -sI "https://www.coloros.com" --max-time 15 2>&1 | head -25

echo ""
echo "===[1.3] curl -I http://id-sso.xiniaoyun.com (强制 http) ==="
curl -sI "http://id-sso.xiniaoyun.com" --max-time 15 2>&1 | head -25

echo ""
echo "===[1.4] curl https://www.coloros.com 首页 body (前 80 行) ==="
curl -sL "https://www.coloros.com" --max-time 15 2>&1 | head -80

echo ""
echo "===[1.5] 首页 meta/JS 里硬编码信息 (coloros.com) ==="
curl -sL "https://www.coloros.com" --max-time 15 2>&1 | grep -iE 'api[._-]?(url|host|base|endpoint)|prod|test|stag|dev|debug|sso|oauth|token|secret|app[._-]?key' | head -20

echo ""
echo "===[1.6] curl id-sso.xiniaoyun.com body (前 80 行) ==="
curl -sL "https://id-sso.xiniaoyun.com" --max-time 15 2>&1 | head -80