https://appdone.github.io/posts/picoctf_forbidden_paths/