#!/bin/bash
export PATH="/usr/bin:/bin:/usr/sbin:/sbin:/usr/local/bin"

TARGET_IPS="112.54.45.252 120.35.30.176 114.115.172.176"
PATHS="/ /login /admin /api /api/v1 /gateway /actuator /actuator/health /swagger-ui.html /v2/api-docs /.env /.git/config /robots.txt /server-status /portal"

echo "Starting HTTP Web Directory Fuzzing on port 8080..."

for ip in $TARGET_IPS; do 
    for path in $PATHS; do 
        # Perform silent request to get the status code only
        code=$(curl -k -s -o /dev/null -w "%{http_code}" -m 3 "http://$ip:8080$path" 2>/dev/null)
        
        # Only print if valid code and not 404 (or connection refused 000)
        if [ "$code" != "404" ] && [ "$code" != "000" ] && [ ! -z "$code" ]; then 
            echo "[HTTP $code] http://$ip:8080$path"
        fi
    done
done

echo "Fuzzing complete."