Check if the parameter "cb" (or any other defined by flag -cb), the headers "accept-encoding, accept, cookie, origin" or any cookie can be used as cachebuster */.

Check for different DOS techniques */.

Simple get request to get the body of a normal response and the cookies */.

Scan cookies for poisoning */.

Check for fat GET */.

Scan headers for poisoning */.

Check for Parameter Cloaking */.

Scan query parameters for poisoning */.