Resource based constrained Delegation (RBCD) WebClient attack

https://www.bussink.net/rbcd-webclient-attack/