https://securingdev.github.io/posts/hacking-the-oscp-web-apps/