| 2020-05-20 | Cross-site scripting (XSS) cheat sheet - 2020 | BaCde | 4516 | |
| 2020-05-19 | 通过sourcemap解压缩webpack | BaCde | 5041 | |
| 2020-05-12 | 6,000+ HackerOne Disclosed Reports | BaCde | 4289 | |
| 2020-05-11 | Hyper-V internals researches (2006-2019) | BaCde | 2484 | |
| 2020-05-11 | Don’t Force Yourself to Become a Bug Bounty Hunter | BaCde | 2303 | |
| 2020-05-11 | From a naive-looking PDF Download to SSRF via HTML Injection in AWS | BaCde | 3839 | |
| 2020-05-11 | Double-Free BUG in WhatsApp exploit poc.[CVE-2020-11932] | BaCde | 3142 | |
| 2020-05-06 | DOM XSS in Gmail with a little help from Chrome | re4lity | 1789 | |
| 2020-04-30 | CVE-2020-0932: remote code execution on microsoft sharepoint | BaCde | 2298 | |
| 2020-04-26 | 一些流行的云waf、cdn、lb的域名列表 | BaCde | 4447 | |
| 2020-04-26 | 爱奇艺的业务安全风控“秘籍” | cloudbase | 6956 | |
| 2020-04-23 | 通达OA 任意用户登录漏洞（匿名RCE）分析 | zrools | 10286 | |
| 2020-04-21 | MacOS Dylib Injection through Mach-O Binary Manipulation | re4lity | 5678 | |
