Abusing MySQL clients to get LFI from the server/client

Data Theft in Salesforce: Manipulating Public Links

When Certificates Fail: A Story of Bypassed MFA in Remote Access

SSTI in Bug Bounty Program: The Time I Played with Handlebars and Broke Stuff

Ghost In The Ppl Part 1: Byovdll

Part 2: From Byovdll To Arbitrary Code Execution In Lsass