https://arimaqz.github.io/posts/stealing-windows-ntlm-with-sqli/