Date Author Title

HEADER SPRAY

2026-06-24Guy BruneauWhat do Ports Hear When Nobody's Listening? An Assessment of Automated Cybercrime [Guest Diary]

HEADER

2026-06-24/a>Guy BruneauWhat do Ports Hear When Nobody's Listening? An Assessment of Automated Cybercrime [Guest Diary]
2025-12-03/a>Johannes UllrichAttempts to Bypass CDNs
2025-10-30/a>Johannes UllrichX-Request-Purpose: Identifying "research" and bug bounty related scans?
2025-09-21/a>Johannes UllrichHelp Wanted: What are these odd requests about?
2025-03-27/a>Johannes UllrichSitecore "thumbnailsaccesstoken" Deserialization Scans (and some new reports) CVE-2025-27218
2025-03-23/a>Johannes UllrichLet's Talk About HTTP Headers.
2017-05-05/a>Xavier MertensHTTP Headers... the Achilles' heel of many applications
2015-09-28/a>Johannes Ullrich"Transport of London" Malicious E-Mail
2014-02-21/a>Johannes UllrichUPS Malware Spam Using Fake SPF Headers
2013-08-25/a>Johannes UllrichWhen does your browser send a "Referer" header (or not)?
2011-07-10/a>Raul SilesSecurity Testing SSL/TLS (HTTPS) Implementations
2011-02-15/a>Jason LamHTTP headers fun

SPRAY

2026-06-24/a>Guy BruneauWhat do Ports Hear When Nobody's Listening? An Assessment of Automated Cybercrime [Guest Diary]