There is a false confidence about mass-assignment vulns that hides how easy it is for them to occur and be exploited. Especially with the `$fillable` property!
So to counter it, here's the story of a time I found a mass-assignment vuln during a pentest...
[$] https://securinglaravel.com/in-depth-mass-assignment-vulnerabilities/
#Laravel