Core Security Cobalt Strike vs Invalid URI Redirection with Apache mod_rewrite (2026)