I wanted to figure out just how exploitable http2shell was in practice, so I've created https://brotli2bitcoin.com with a standard production config -- pop an RCE and find the flag to claim the $1K BTC.

And to make it interesting, there's a live stream showing every single attack attempt happening live https://youtube.com/live/ZC3ChgRH9QM

Good luck. P.S. "trust me bro", but not a honeypot just some fun and my attempt at hiring.