readme and exploit