| 2015-04-21 | The power of DNS rebinding: stealing WiFi passwords with a website(B&O) | MD | 2809 | |
| 2015-04-21 | Playing with Content-Type – XXE on JSON Endpoints | MD | 2593 | |
| 2015-04-20 | SQL Inception: How to select yourself | MD | 2781 | |
| 2015-04-18 | crossdomain.xml : Beware of Wildcards | MD | 2570 | |
| 2015-04-18 | Modern Objective-C Exploitation Techniques | MD | 3627 | |
| 2015-04-18 | Google’s April Fool’s prank inadvertently broke their security | MD | 2341 | |
| 2015-04-08 | CanSecWest 2015 Files | MD | 7514 | |
| 2015-04-08 | SyScan2015 Conference Slides | MD | 3212 | |
| 2015-04-03 | The poor, misunderstood innerText | MD | 3026 | |
| 2014-11-08 | How I REVERSE ENGINEERED GOOGLE DOCS To Play Back Any Document’s Keystrokes | MD | 2802 | |
