| 2017-01-10 | 通过Empire和PowerShell攻击JBoss | re4lity | 3008 | |
| 2017-01-10 | [Bug Bounty] GitHub Enterprise SQL Injection | 西瓜 | 7828 | |
| 2017-01-10 | Web for Pentester II练习题解 | quantumsec | 12754 | |
| 2017-01-10 | 浅谈动态爬虫与去重 | quantumsec | 3760 | |
| 2017-01-10 | 基于Web的应用程序的漏洞 | 504 | 3530 | |
| 2017-01-09 | Racing for everyone: descriptor describes TOCTOU in Apple's core | 西瓜 | 8623 | |
| 2017-01-09 | Operative- Framework：基于指纹的信息收集框架 | re4lity | 2875 | |
| 2017-01-09 | PHPMailer 命令执行漏洞（CVE-2016-10033）分析 | 西瓜 | 7861 | |
| 2017-01-09 | A dynamic dictionary merger for successful dictionary based attacks. | 504 | 2309 | |
| 2017-01-09 | CyberCrowl is a python Web path scanner tool | 504 | 3100 | |
| 2017-01-09 | Web App Penetration Testing Local File Inclusion (LFI) Testing Techniques | 504 | 2552 | |
| 2017-01-08 | 持久化 XSS：被 ServiceWorkers 支配的恐惧 | re4lity | 2495 | |
| 2017-01-08 | 内网渗透的一些工具和平台汇总 | quantumsec | 10057 | |
