| 2017-01-09 | PHPMailer 命令执行漏洞（CVE-2016-10033）分析 | 西瓜 | 6577 | |
| 2017-01-09 | A dynamic dictionary merger for successful dictionary based attacks. | 504 | 2207 | |
| 2017-01-09 | Web App Penetration Testing Local File Inclusion (LFI) Testing Techniques | 504 | 2435 | |
| 2017-01-08 | Safari Reader UXSS | ourren | 2422 | |
| 2017-01-08 | [Bug Bounty] GitHub Enterprise SQL Injection | ourren | 2507 | |
| 2017-01-08 | 持久化 XSS：被 ServiceWorkers 支配的恐惧 | re4lity | 2420 | |
| 2017-01-07 | Python 格式化字符串漏洞（Django为例） | redboy | 9654 | |
| 2017-01-07 | BurpSuite插件开发Tips：请求响应参数的AES加解密 | re4lity | 6345 | |
| 2017-01-06 | SRC漏洞挖掘小见解 | re4lity | 3276 | |
| 2017-01-06 | 美团点评数据库中间件DBProxy开源 | ourren | 2853 | |
| 2017-01-06 | dedeCMS友情链接getshell漏洞分析 | fresh | 8175 | |
| 2017-01-06 | Data Retrieval over DNS in SQL Injection Attacks | webs3c | 5928 | |
| 2017-01-06 | SQLMap Tamper Scripts Update ~ ForkBombers | 504 | 2683 | |
