The Internet Gets a Dress Code!

This article explains a proof-of-concept covert HTTP tunneling technique called "HTTP cookie tap" that aims to bypass next-generation firewall application classification and IDS signatures by embedding arbitrary data in HTTP cookies and responses; the author discusses detection challenges, evasion techniques (URL randomization, HTML in responses), shares usage commands and a downloadable prototype, and notes practical test experiences.