from curl_cffi import requests
import json,hashlib
hosts=['mein-portal.baloise.de','maklerportal.baloise.de','si-portal.baloise.de']
paths=[]
for ctx in ['/auth-admin','/admin']:
 for p in ['/ui/i18n/en.json','/ui/assets/airlock/i18n/en.json','/ui/app/i18n/en.json','/ui/app','/ui/3rdpartylicenses.txt','/rest/public/application.wadl','/rest/application.wadl','/rest/configuration/configurations','/editConfig/VAADIN/vaadinBootstrap.js']:
  paths.append(ctx+p)
for h in hosts:
 for p in paths:
  try:
   r=requests.get('https://'+h+p,headers={'X-Bug-Bounty':'dwbzn','Cache-Control':'no-cache','Accept':'*/*'},timeout=15,impersonate='chrome',allow_redirects=False,toadex_capture=False)
   print(json.dumps({'host':h,'path':p,'status':r.status_code,'size':len(r.content),'sha':hashlib.sha256(r.content).hexdigest()[:12],'ct':r.headers.get('content-type'),'loc':r.headers.get('location'),'body':r.text[:120]}))
  except Exception as e: print(json.dumps({'host':h,'path':p,'error':str(e)}))