Chaining XSS, SSRF, and deserialization vulnerabilities to get RCE
Plundering dead Active Directory accounts