| 2018-09-19 | When EL Injection meets Java Deserialization | re4lity | 2509 | |
| 2018-09-19 | Intercepting and Modifying responses with Chrome via the Devtools Protocol | re4lity | 2439 | |
| 2018-09-19 | A Tale of Two Bugs · Our Machinery | re4lity | 1873 | |
| 2018-09-19 | XSS Vulnerabilities in Multiple iFrame Busters Affecting Top Tier Sites | re4lity | 2159 | |
| 2018-09-19 | Peekaboo Critical Vulnerability in NUUO Network Video Recorder | re4lity | 1549 | |
| 2018-09-19 | Cheatsheet - Flask & Jinja2 SSTI | re4lity | 2603 | |
| 2018-09-19 | 碎碎念之Afl-fuzz Docker实践 | re4lity | 1881 | |
| 2018-09-14 | Android平台间谍软件BusyGasper分析 | birk | 8827 | |
| 2018-09-09 | 突破限制—一份安全编写和审计Chrome扩展程序的指南(下) | ginove | 2657 | |
| 2018-09-07 | 突破限制—一份安全编写和审计Chrome扩展程序的指南(上) | ginove | 1632 | |
| 2018-09-06 | 子域名劫持指南 | YSN | 4205 | |
| 2018-09-02 | 利用GIXY发现错误的Nginx配置 | ginove | 5289 | |
| 2018-09-02 | 技术报告：绕过工作流保护机制 - SharePoint远程代码执行 | ginove | 2164 | |
