Sandbox escape using WinHTTP Web Proxy Auto-Discovery Service - View it on GitHub