| 2016-01-12 | HTTP头注入发现方法（有案例） | zzzhhh | 7719 | |
| 2016-01-12 | 从活动目录获取域管理员权限的各种姿势 | ourren | 2366 | |
| 2016-01-12 | (xss)when-reflected-becomes-stored | tolive | 2673 | |
| 2016-01-07 | Blade:A webshell tool with customized WAF bypass payloads | ourren | 2570 | |
| 2016-01-02 | 跨平台版中国菜刀Cknife发布 | ourren | 3215 | |
| 2015-12-30 | 利用Shodan和Censys进行信息侦查 | ourren | 2971 | |
| 2015-12-29 | Recon, Subdomain Bruting, Zone Transfers | ourren | 2745 | |
| 2015-12-29 | password-lists: for use in penetration testing situations, broken | ourren | 1968 | |
| 2015-12-21 | 绑定第三方oauth账号登陆的安全风险 | ourren | 2336 | |
| 2015-12-21 | SaiDic V1.0爆破字典 | ourren | 3673 | |
| 2015-12-19 | in-depth-analyses-of-the-joomla-0-day-user-agent-exploit | tolive | 2905 | |
| 2015-12-17 | X-XSS-Nightmare: 1; mode=attack XSS Attacks Exploiting XSS Filter | MD | 7070 | |
| 2015-12-15 | How to Xss(科普&minictf writeup) | ourren | 2635 | |
