| 2018-03-19 | firepwd.py, an open source tool to decrypt Mozilla protected passwords | re4lity | 2762 | |
| 2018-03-19 | Uncovering a Bug in Cloudflare's Minification Service | re4lity | 2266 | |
| 2018-03-12 | 知识图谱系列（1）基础知识简介 | re4lity | 4229 | |
| 2018-03-11 | PHP SSRF Techniques - How to bypass filter_var(), preg_match() and parse_url() | re4lity | 5220 | |
| 2018-03-11 | Python Remote Administration Tool (RAT) to gain meterpreter session | re4lity | 2732 | |
| 2018-03-11 | Abusing Certificate Transparency logs for getting HTTPS websites subdomains. | re4lity | 2651 | |
| 2018-03-11 | Source Code Search Engine | re4lity | 2550 | |
| 2018-03-11 | How I found a $5,000 Google Maps XSS (by fiddling with Protobuf) | re4lity | 2274 | |
| 2018-03-11 | Getting any Facebook user's friend list and partial payment card details | re4lity | 2855 | |
| 2018-03-07 | 谈谈Selenium Server的安全问题 - 未完 | re4lity | 2062 | |
| 2018-03-04 | Java反序列化漏洞学习实践三：理解Java的动态代理机制 | re4lity | 2467 | |
| 2018-03-04 | Java反序列化漏洞学习实践二：Java的反射机制（Java Reflection） | re4lity | 2776 | |
| 2018-03-04 | Java反序列化漏洞学习实践一：从Serializbale接口开始，先弹个计算器 | re4lity | 3260 | |
