Weblogic XMLDecoder RCE分析
https://paper.seebug.org/487/

游戏协议分析——从flash文件逆向分析到python模拟游戏客户端通信
http://www.undefinedv.cn/index.php/archives/14/

如何利用Web漏洞窃取NTLM哈希
http://www.4hou.com/system/9383.html

Yahoo! RCE via Spring Engine SSTI
https://hawkinsecurity.com/2017/12/13/rce-via-spring-engine-ssti/

Code Signing Certificate Cloning Attacks and Defenses
https://posts.specterops.io/code-signing-certificate-cloning-attacks-and-defenses-6f98657fc6ec