Files
felhom.eu/documentation/audits/signup-lock-2026-09-29/B/wtr.sh
T

7 lines
783 B
Bash

DB=hike-db.enkisfelhom.hu; n=0
for p in /api/collections/users/records /api/collections/users/records/ /API/COLLECTIONS/USERS/RECORDS /Api/Collections/Users/Records /api/collections/users/r%65cords //api/collections/users/records "/api/collections/users/records?x=1" /api/collections/_pb_users_auth_/records; do
n=$((n+1)); c=$(curl -sk -o /tmp/t.b -w '%{http_code}' -H "Host: $DB" -H 'Content-Type: application/json' -X POST -d "{\"username\":\"trk$n$$\",\"email\":\"trk$n$$@x.hu\",\"password\":\"Xx12345678z9\",\"passwordConfirm\":\"Xx12345678z9\"}" "https://127.0.0.1$p")
v=$(grep -q 'sign-up is closed' /tmp/t.b && echo BLOCK || (grep -q '"collectionName":"users"' /tmp/t.b && echo GOT-IN || echo APP-REFUSED))
printf '%-45s -> %s %s\n' "$p" "$c" "$v"
done; rm -f /tmp/t.b