https://t0xodile.github.io/posts/Using-HTTP-request-smuggling-to-hijack-users'-sessions/
Using HTTP request smuggling to hijack users' sessions - t0xodile's blog