TrevorC2 v1.1/v1.2 fails to prevent fingerprinting primarily via a discrepancy between response headers when responding to different HTTP methods, also via predictible responses when accessing and interacting with the "SITEPATHQUERY".
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-18850.json"