---
title: "Tweet #2531912671"
date: 2009-07-08 00:00:00 +00
tags: twitter
templateEngineOverride: njk,md
cross_posted_to:
  - "facebook"
---

{% raw %}Carving botnet commands out of HTTP 200's that use Content-Type application/octet-stream instead of text/plain. Guessing it isn't 'data'{% endraw %}