https://trompiesec.co.uk/posts/iml-mongodb-nosql-injection/