Presentation slides from BlackHat Europe 2014 regarding reflected file downloads as a new web attack vector.
You can download it from the following link: https://packetstormsecurity.com/files/download/130409/eu-14-Hafif-Reflected-File-Download-A-New-Web-Attack-Vector.pdf
Source: https://packetstormsecurity.com/files/130409/Reflected-File-Download-A-New-Web-Attack-Vector.html

