Concealing payloads in URL credentials | PortSwigger Research

https://portswigger.net/research/concealing-payloads-in-url-credentials

https://twitter.com/home/status/1849287320924729850

https://twitter.com/home/status/1849459516292690097

https://twitter.com/home/status/1849467185543991509