This post provides a glimpse of the challenges we face when mapping attack surfaces at scale – when you do enumeration at scale, you inevitably see weird things that turn supposedly simple actions into a little more complex actions.