https://seanpesce.blogspot.com/2024/09/exploiting-android-client-webviews-with.html