HTTP Header Exploitation

Here is William Bellamy's SANS/GSEC paper on HTTP Header Exploitation. Note: it has nothing to do with the recent exploits which I'll blog about later in the week.