https://melsatar.blog/2012/05/01/white-box-techniques-for-security-testing/