Shinobuu

I'm a minor and I stumbled upon the following site due to my friend's brother taking their course. Now the thing is, they make you download encrypted video and give their own player, which is shady with its conditions (Like only laptops are allowed, yada yada) and I decided to have a go at it.

Main URL: https://www.swapnilpatni.com/index.php

Simple disassembly with dnSpy, am left me with their FTP server details where I find that their code is taking pictures from webcam and uploading it without any permissions. There are over 50 thousand pictures on that server (Search the directories recursively for .png).

FTP Address: ftp://13.234.148.151/ FTP Username: awsftpuser FTP Password: a_&$2KpPG

Am not sure what to do with the information and nor can I just shrug it off. Its a pretty big association so don't wanna take the heat.

Thank you for any input, and stay safe out there!