sans.edu

threat-intel

The Truth about GET and HTTP Standards, (Tue, Sep 22nd)

A recent test revealed that several web servers, including Apache and NGINX, are now accepting GET requests with a body, a feature not traditionally supported by the HTTP standard. This behavior could potentially be expl…

SANS Internet Storm Center · 1d ago Info

http http11 web_server

threat-intel

Obfuscating IP Addresses as Hostnames, (Tue, Aug 25th)

Attackers are increasingly using hostname-based IP address obfuscation, specifically leveraging services like 1u.ms to bypass security measures. This tactic is used to exploit vulnerabilities like Server Side Request For…

SANS Internet Storm Center · Aug 25, 2026 Medium

ssrf dns obfuscation

All articles

news.mlab.sh

sans.edu

The Truth about GET and HTTP Standards, (Tue, Sep 22nd)

Obfuscating IP Addresses as Hostnames, (Tue, Aug 25th)