| 2017-02-03 | KopiLuwak: A New JavaScript Payload from Turla | ourren | 2686 | |
| 2016-12-27 | 利用JavaScript进行后台文件上传getshell | ourren | 2539 | |
| 2016-12-21 | A collection of JavaScript engine CVEs with PoCs | BaCde | 2753 | |
| 2016-12-11 | Safari浏览器JavaScript引擎JavaScriptCore的漏洞利用技术 | ourren | 2706 | |
| 2016-12-10 | PortEx：分析PE文件的java库 | re4lity | 2600 | |
| 2016-11-24 | java Deserialization Cheat Sheet | BaCde | 2285 | |
| 2016-11-16 | jSQL Injection v0.77 - Java application for automatic SQL database injection | vicker | 6614 | |
| 2016-11-15 | Pwning Your Java Messaging With Deserialization Vulnerabilities[PDF] | BaCde | 2127 | |
| 2016-11-05 | Java反序列化工具 — Java Deserialization Exp Tools | ourren | 5547 | |
| 2016-10-28 | Attacking JavaScript Engines: A case study of JavaScriptCore and CVE-2016-4622 | BlackCastle | 7481 | |
