FROM AKAMAI TO F5 TO NTLM... WITH LOVE

Summary from the TLDR InfoSec newsletter

The blog post details how the author was able to abuse Akamai services to attack F5s and subsequently steal internal data including authorization and session tokens from their customers. It provides detailed explanations of how normal GET requests and malformed POST requests using a smuggling gadget can affect backend servers and potentially poison the response queue or cache.