https://portswigger.net/daily-swig/p...y-hack-exposed