https://robscharf.github.io/posts/2022/04/thm-upload-vulnerabilities--write-up/