HACKING: all you need is http access