https://www.ronar.net/2020/05/web-security-testing-guide.html