The endpoint for uploading files does not require authorization and relies on the obscurity of an HTTP POST to https://bx.ee/upload-stuff with a file input named myFile. This easy to use web portal for the file upload should be password protected by basic auth. The files when uploaded are available here