https://pullupnghost.github.io/posts/basic-pentesting/