https://www.hackingarticles.in/multiple-ways-to-exploiting-http-authentication/