| 2019-04-04 | I-See-You: Bash and Javascript tool to find the exact location of user | ourren | 1699 | |
| 2019-03-31 | 从零开始Java代码审计系列(一) | ourren | 2232 | |
| 2019-03-31 | browspy: 浏览器用户全部信息收集JavaScript | ourren | 2000 | |
| 2019-03-27 | Attacking Java RMI services after JEP 290 | re4lity | 2070 | |
| 2019-03-22 | Java Serialization Objects (JSO): An Exploitation Guide | re4lity | 1659 | |
| 2019-03-20 | .NET高级代码审计（第四课） JavaScriptSerializer反序列化漏洞 | ourren | 1903 | |
| 2019-03-20 | Java deserialization RCE in Tomcat cluster | re4lity | 5359 | |
| 2019-02-20 | Oracle Java glyph_CloseContour 的运行时 TTF 字体越界读取漏洞 | mimblewimble | 1788 | |
| 2019-02-18 | 如何对 JavaScript 引擎进行 Fuzzing | mimblewimble | 1746 | |
| 2019-02-18 | 通过 JavaScript 编译器攻击 Edge | mimblewimble | 1754 | |
