/sapi/fuzzer/corpus/
../
exif
json
unserialize