HTTP Credential Stuffing, SQL Injection, Webshell Upload, and Callback