example:http://victim/scriptpath or http://victim  -->