https://waibui.github.io/posts/burpsuite-exploit/