| 2019-04-04 | I-See-You: Bash and Javascript tool to find the exact location of user | ourren | 1688 | |
| 2019-03-31 | 从零开始Java代码审计系列(一) | ourren | 2225 | |
| 2019-03-31 | browspy: 浏览器用户全部信息收集JavaScript | ourren | 1972 | |
| 2019-03-27 | Attacking Java RMI services after JEP 290 | re4lity | 2053 | |
| 2019-03-22 | Java Serialization Objects (JSO): An Exploitation Guide | re4lity | 1647 | |
| 2019-03-20 | .NET高级代码审计（第四课） JavaScriptSerializer反序列化漏洞 | ourren | 1855 | |
| 2019-03-20 | Java deserialization RCE in Tomcat cluster | re4lity | 5119 | |
| 2019-02-20 | Oracle Java glyph_CloseContour 的运行时 TTF 字体越界读取漏洞 | mimblewimble | 1756 | |
| 2019-02-18 | 如何对 JavaScript 引擎进行 Fuzzing | mimblewimble | 1737 | |
| 2019-02-18 | 通过 JavaScript 编译器攻击 Edge | mimblewimble | 1729 | |
