| 2018-03-19 | firepwd.py, an open source tool to decrypt Mozilla protected passwords | re4lity | 2909 | |
| 2018-03-19 | Uncovering a Bug in Cloudflare's Minification Service | re4lity | 2388 | |
| 2018-03-12 | 知识图谱系列（1）基础知识简介 | re4lity | 4687 | |
| 2018-03-11 | PHP SSRF Techniques - How to bypass filter_var(), preg_match() and parse_url() | re4lity | 5699 | |
| 2018-03-11 | Python Remote Administration Tool (RAT) to gain meterpreter session | re4lity | 2840 | |
| 2018-03-11 | Abusing Certificate Transparency logs for getting HTTPS websites subdomains. | re4lity | 2752 | |
| 2018-03-11 | Source Code Search Engine | re4lity | 2595 | |
| 2018-03-11 | How I found a $5,000 Google Maps XSS (by fiddling with Protobuf) | re4lity | 2386 | |
| 2018-03-11 | Getting any Facebook user's friend list and partial payment card details | re4lity | 3040 | |
| 2018-03-07 | 谈谈Selenium Server的安全问题 - 未完 | re4lity | 2100 | |
| 2018-03-04 | Java反序列化漏洞学习实践三：理解Java的动态代理机制 | re4lity | 2549 | |
| 2018-03-04 | Java反序列化漏洞学习实践二：Java的反射机制（Java Reflection） | re4lity | 2830 | |
| 2018-03-04 | Java反序列化漏洞学习实践一：从Serializbale接口开始，先弹个计算器 | re4lity | 3340 | |
