| 2017-10-24 | 旁路WAF：使用Burp插件绕过一些WAF设备 | 嘶吼 | 3385 | |
| 2017-10-23 | WDigest：清除内存中的密码，使mimikatz等工具无法获取到明文 | 嘶吼 | 3482 | |
| 2017-10-23 | SecWiki周刊（第190期) | 504 | 3524 | |
| 2017-10-22 | nsearch: minimal script to help find script into the nse database | re4lity | 2932 | |
| 2017-10-22 | Blazy: a modern login brute forcer, CSRF, Clickjacking, Cloudflare and WAF | re4lity | 3512 | |
| 2017-10-22 | open-redirect-scanner: open redirect subdomains scanner | re4lity | 2854 | |
| 2017-10-22 | Wiping Out CSRF – Joe Rozner – Medium | re4lity | 3045 | |
| 2017-10-22 | Broken Link Hijacking - How expired links can be exploited. | re4lity | 7134 | |
| 2017-10-22 | subjack: Hostile Subdomain Takeover tool written in Go | re4lity | 3749 | |
| 2017-10-22 | MIDA-Multitool: 脚本集合(系统枚举,漏洞验证,权限提升) | re4lity | 3285 | |
| 2017-10-22 | The Stony Path of Android | re4lity | 2591 | |
| 2017-10-22 | OSINTforPenTests 渗透者的开源情报搜集 | re4lity | 3365 | |
| 2017-10-22 | How i found an SSRF in Yahoo! Guesthouse (Recon Wins) | re4lity | 3235 | |
