Cobalt Strike's ExternalC2 framework vs Invalid URI Redirection with Apache mod_rewrite (2026)