https://www.exploit-db.com/exploits/41564
https://gist.github.com/joshhartman/5380593
https://github.com/oscarotero/Embed
https://stackoverflow.com/questions/45642893/how-to-get-access-token-for-an-api-by-using-post-method-in-javascript