Please help to identify the following description belonging to which technique in MITRE and the corresponding tactics: OwaAuth uses incoming HTTP requests with a username keyword and commands and handles them as instructions to perform actions.