Exploiting HTTP request verb confusion via the __RequestVerb header to leak .NET remoting URLs.