https://blog.infoxide.com/pyexp-offsec-walkthrough/