Have you tested with reverse_http(s) payloads?