KILSERV — Security ResearchCVE disclosures, offensive research, and technical write-ups by Guilherme Mury.https://kilserv.vercel.app/enBreaking SuiteCRM's Authentication Layer: SQL Injection and LDAP Injection in the Directory Auth Flowhttps://kilserv.vercel.app/research/breaking-suitecrm-authentication-layer-double-cve/https://kilserv.vercel.app/research/breaking-suitecrm-authentication-layer-double-cve/Technical walkthrough of identifying, exploiting, and responsibly disclosing a SQL Injection and LDAP Injection vulnerability in SuiteCRM (CVE-2026-33288 and CVE-2026-33289).Mon, 20 Apr 2026 00:00:00 GMTCVESQL InjectionLDAP InjectionWeb SecuritySuiteCRMBeyond the Toolset: Advanced Red Teaming via LOTL and WMI Persistencehttps://kilserv.vercel.app/research/beyond-the-toolset-lotl-wmi-persistence/https://kilserv.vercel.app/research/beyond-the-toolset-lotl-wmi-persistence/Technical walkthrough of advanced red team tradecraft leveraging Living-off-the-Land techniques and WMI-based persistence mechanisms to evade modern defensive controls.Thu, 15 Jan 2026 00:00:00 GMTRed TeamLOTLWMIPersistenceEDR EvasionFrom Code Analysis to CVE: Uncovering SQL Injection in ChurchCRM (CVE-2025-67877)https://kilserv.vercel.app/research/churchcrm-sqli-cve-2025-67877/https://kilserv.vercel.app/research/churchcrm-sqli-cve-2025-67877/Technical walkthrough of identifying, exploiting, and responsibly disclosing a SQL Injection vulnerability in ChurchCRM (CVE-2025-67877).Thu, 15 Jan 2026 00:00:00 GMTCVESQL InjectionWeb SecurityChurchCRM