some footlocker bypasses from the past:
origin bypass, if you set up fastly vcl pointed at ftl origin, u would get past the timeout on the website, but they had another layer so me and the nyte guys sifted through a ton of logs (when fastly used to return other peoples headers in your requests lmao) and found one specific header (iirc x-fl-edge-id) and one specific value that would get past it
i remember i stopped socks on footlocker from being able to be bought for an hour by accident w/ it
queue/dd/cache, would send requests from fastly edge that would get no datadome, set fastly host header to ftl, then in host header cycled between ports 1 thru 65535 (minus a few) to bypass cache, and also queue. also needed some other headers to prevent 5xx error server restarts (lol)
deadass think i shaved years off my lifespan because of this, but nothing has ever matched the thrill of waiting for the clock to turn the hour, and seeing checkouts flowing in, knowing the code you wrote just 5 hours before worked.