https://www.cthuwusecurity.com/posts/htb-bug-bounty_path/