1. Can check cookies, rememberme session cookies, headers etc for b64 encoded pickled items. Then use the pickle webshell to generate a valid shell, and replacing it.