https://deepquest.code511.com/blog/2017/10/remote-tomcat-remote-code-execution-via-jsp-upload-bypass-metasploit/