While it still works on legacy web applications, its effectiveness has waned against modern defenses: WAF Detection
