| 2017-09-09 | Abusing JavaScript frameworks to bypass XSS mitigations | ourren | 3012 | |
| 2017-09-09 | Using Alternate Data Streams to Bypass User Account Controls | re4lity | 2927 | |
| 2017-09-09 | Modern Web Application Penetration Testing , Hash Length Extension Attacks | re4lity | 2688 | |
| 2017-09-08 | s2-053漏洞重现(附exp) | LSA | 14509 | |
| 2017-09-08 | Exploiting Python Deserialization Vulnerabilities | BaCde | 3058 | |
| 2017-09-08 | Proof-of-concept JavaScript malware implemented as a Proxy Auto-Configuration | BaCde | 2717 | |
| 2017-09-08 | Uber Bug Bounty: Gaining Access To An Internal Chat System | BaCde | 2869 | |
| 2017-09-08 | fastjson 调试利用记录 | ourren | 2349 | |
| 2017-09-08 | 从WordPress SQLi谈PHP格式化字符串问题 | ourren | 2360 | |
| 2017-09-08 | cobaltstrike3.8 破解版 | ourren | 4768 | |
| 2017-09-08 | ThinkerPHP后台远程任意代码执行漏洞 | 阿里云先知社区 | 3997 | |
| 2017-09-08 | 影子经纪人 9月 Tools | 西瓜 | 7406 | |
| 2017-09-08 | 基于Termux打造Android手机渗透神器（2017-7-22更新） | blackwolf | 6740 | |
