https://skullhat.github.io/posts/mastering-picoctf-web-exploits-walkthrough-and-blackhat-ctf-prep/
Mastering PicoCTF Web Exploits Walkthrough