Privilege Escalation in Active Directory: RBCD Attack
What is Resource-Based Constrained Delegation, how is it exploited, and a full end-to-end attack chain walk-through using RBCD-Pwn.
Burak Dirlik
Security Advisory LDBS-2026-001-A: Stored PHP Code Injection via eval() in laravel-database-schedule
Coordinated disclosure (LDBS-2026-001-A): a mass-assignable params field reaches PHP eval() in robersonfaria/laravel-database-schedule, giving any user with scheduler form access stored remote code execution that fires on every scheduler tick. Critical — CVSS 9.9, CWE-94. No patch; repository archived.
Security Advisory LDBS-2026-001-B: Stored OS Command Injection via command_custom in laravel-database-schedule
Coordinated disclosure (LDBS-2026-001-B): the command_custom field passes an unvalidated shell string straight to /bin/sh -c in robersonfaria/laravel-database-schedule. Any user with scheduler form access gets OS command execution — and it exits DONE, leaving no log anomaly. Critical — CVSS 9.9, CWE-78. No patch; repository archived.
GraphQL Vulnerabilities from an Attacker's Perspective
What GraphQL vulnerabilities are and how to find them in bug bounty — introspection, IDOR/BOLA, injection, and rate-limit bypass via batching, explained from scratch with examples.
SSRF Deep Dive: From Internal Services to Cloud Metadata
From basic internal port scanning to AWS/GCP metadata exploitation — SSRF walked through real pentest scenarios, filter bypasses, and cloud attack paths.
JWT Attacks: A Pentester's Playbook Through Real Scenarios
From alg:none to kid injection, from algorithm confusion to jku manipulation — the JWT attack surface walked through real pentest scenarios.
Mass Assignment: A Silent but Devastating API Vulnerability
The technical origin of the Mass Assignment vulnerability, scenario-based exploitation examples, real-world cases, and framework-specific defense methods.