https://infosecjunky.com/hack-the-box-bounty-writeup-without-metasploit/