| 2016-04-07 | doork: Passive Vulnerability Auditor | ourren | 2266 | |
| 2016-04-07 | Web Application Security with ASP.NET / MVC & OWASP(year-2013) | tolive | 3203 | |
| 2016-04-06 | Using Burp to Exploit Blind SQL Injection Bugs | zzzhhh | 9028 | |
| 2016-04-04 | Python and Powershell internal penetration testing framework | ourren | 3047 | |
| 2016-04-03 | Nmap备忘单：从探索到漏洞利用（Part3） | ourren | 2620 | |
| 2016-03-24 | Exploring SSTI in Flask/Jinja2, Part II | Bincker | 2345 | |
| 2016-03-22 | IE安全系列之——RES Protocol | ourren | 3009 | |
| 2016-03-21 | FuzzerPwd: Fuzzer常见的弱口令作为字典 | ourren | 3329 | |
| 2016-03-20 | collection of tools for security research, CTFs | ourren | 2446 | |
| 2016-03-19 | sql-injection-cheat-sheet | tolive | 3491 | |
| 2016-03-18 | OrangeScan: 在线子域名信息收集工具 | ourren | 3232 | |
| 2016-03-18 | 0ctf writeup | ourren | 2856 | |
| 2016-03-14 | QQ模拟登录实现之四两拨千斤（基于V8引擎） | ourren | 2526 | |
