Password Reset and Web-Cache Poisoning (and a Little Surprise in RFC-2616)https://www.skeletonscribe.net/2013/05/practical-http-host-header-attacks.html by d0bby • 7 years ago 2 1 7 years agoSKskeletonscribe.net