https://blog.kalrong.net/en/2017/11/20/hackerone-212-ctf-writeup/