Research 2 The Single-Packet Shovel: Digging for Desync-Powered Request Tunnelling May 22, 2025 Exploiting trust - Weaponizing permissive CORS configurations Oct 1, 2024