http://www.kitploit.com/2017/10/xcat-automate-xpath-injection-attacks.html