init htb

old htb folders

HTB/pollution/target/var.www.collect.app.controllers.api.php

@@ -0,0 +1,23 @@
+<?php
+
+if(!is_admin())
+{
+     die(redirect('/home'));
+}
+
+if(!isset($_POST['manage_api']) or empty($_POST['manage_api']))
+{
+    die(redirect('/home'));
+}
+
+
+libxml_disable_entity_loader(false);
+$dom = new DOMDocument();
+$dom->loadXML($_POST['manage_api'], LIBXML_NOENT | LIBXML_DTDLOAD);
+    
+$xml = simplexml_import_dom($dom);
+    
+header('Content-type: application/json');
+echo(curl_api($xml->method, "http://localhost:3000{$xml->uri}", $xml->user));
+    
+die();