Reference: http://www.secgeek.net/bookfresh-vulnerability/ - View it on GitHub