Pre-SSL authentication hijack PoC