If you're doing a pentest or bug bounty on a target that sits behind a reverse proxy (nginx, HAProxy, CDNs like Cloudflare or Akamai — basically anything modern), there's a good chance the front-end ...