https://bilalgns.github.io/posts/hackthebox-server-side-attacks/