>>511392927
Hilarious. Basically all this python script is doing is doing a get call against the base URL, which is defined as a variable. It’s then looking for any type of status 200 response which is a http return code, which shows content is available. From that point forward, the script works on the status 200 response to grab jpg images. There’s nothing here with authentication. Everything was publicly available this was 100% on the application side. This was not a hack. Shit was wide open.