http://www.kitploit.com/2016/08/brutexss-cross-site-scripting.html