| 2018-03-19 | firepwd.py, an open source tool to decrypt Mozilla protected passwords | re4lity | 2870 | |
| 2018-03-19 | Uncovering a Bug in Cloudflare's Minification Service | re4lity | 2367 | |
| 2018-03-12 | 知识图谱系列（1）基础知识简介 | re4lity | 4549 | |
| 2018-03-11 | PHP SSRF Techniques - How to bypass filter_var(), preg_match() and parse_url() | re4lity | 5593 | |
| 2018-03-11 | Python Remote Administration Tool (RAT) to gain meterpreter session | re4lity | 2808 | |
| 2018-03-11 | Abusing Certificate Transparency logs for getting HTTPS websites subdomains. | re4lity | 2728 | |
| 2018-03-11 | Source Code Search Engine | re4lity | 2579 | |
| 2018-03-11 | How I found a $5,000 Google Maps XSS (by fiddling with Protobuf) | re4lity | 2346 | |
| 2018-03-11 | Getting any Facebook user's friend list and partial payment card details | re4lity | 3006 | |
| 2018-03-07 | 谈谈Selenium Server的安全问题 - 未完 | re4lity | 2093 | |
| 2018-03-04 | Java反序列化漏洞学习实践三：理解Java的动态代理机制 | re4lity | 2534 | |
| 2018-03-04 | Java反序列化漏洞学习实践二：Java的反射机制（Java Reflection） | re4lity | 2823 | |
| 2018-03-04 | Java反序列化漏洞学习实践一：从Serializbale接口开始，先弹个计算器 | re4lity | 3322 | |
