https://techvomit.net/web-application-penetration-testing-notes/