| 2016-10-29 | XSS dynamic detection using PhantomJs | ourren | 3339 | |
| 2016-10-29 | Nishang：PowerShell渗透测试工具 | re4lity | 2547 | |
| 2016-10-29 | Google SpreadSheet的CSRF漏洞和JSON劫持漏洞导致数据窃取 | re4lity | 2578 | |
| 2016-10-28 | Attacking JavaScript Engines: A case study of JavaScriptCore and CVE-2016-4622 | BlackCastle | 7258 | |
| 2016-10-28 | Bypass unsafe-inline mode CSP | lxghost | 7355 | |
| 2016-10-28 | 关于 mirai 僵尸网络控制主机的数据分析 | lxghost | 8280 | |
| 2016-10-27 | Win10在docker中运行GourdScanV2 | ourren | 3237 | |
| 2016-10-26 | 【漏洞预警】Joomla未授权创建账号/权限提升漏洞 | re4lity | 2224 | |
| 2016-10-26 | Ruler：一款利用Exchange服务渗透的安全工具 | ourren | 4077 | |
| 2016-10-26 | 使用DNS 预读取绕过Content Security Policy（CSP） | re4lity | 2480 | |
| 2016-10-26 | Hack.lu 2016 - Hadoop safari - Hunting for vulnerabilities | re4lity | 8432 | |
| 2016-10-25 | 浏览器插件的攻击向量 | ourren | 2103 | |
| 2016-10-23 | CSP的今世与未来 | ourren | 2662 | |
