| 2018-09-24 | SecWiki周刊（第238期) | 504 | 1374 | |
| 2018-09-22 | [SecTrans-3]你应该知道的7个XSS利用场景 | 504 | 2201 | |
| 2018-09-22 | JavaEE论坛2.0审计记录 | ch1st | 5431 | |
| 2018-09-22 | An HTTP network library for hackers | endness | 4966 | |
| 2018-09-21 | Hijack the Google Login flow (Bug Bounty Submission) | re4lity | 2585 | |
| 2018-09-21 | 传真机攻击面研究 | re4lity | 5730 | |
| 2018-09-21 | CAT基于Java开发的实时应用监控平台，包括实时应用监控，业务监控 | re4lity | 6124 | |
| 2018-09-21 | AFL-based Java fuzzers and the Java Security Manager | re4lity | 2233 | |
| 2018-09-21 | NUUO摄像头最新高危漏洞预警(CVE-2018-1149) | BaCde | 4226 | |
| 2018-09-19 | hide-and-seek-tracking-nso-groups-pegasus-spyware-to-operations-in-45-countries | tolive | 2494 | |
| 2018-09-19 | JavaMelody组件XXE漏洞解析 | re4lity | 5029 | |
| 2018-09-19 | When EL Injection meets Java Deserialization | re4lity | 2650 | |
| 2018-09-19 | Intercepting and Modifying responses with Chrome via the Devtools Protocol | re4lity | 2562 | |
