Fix Python Arbitrary Command Execution Vulnerability
https://joychou.org/codesec/fix-python-arbitrary-command-execution-vulnerability.html

基于Service Worker 的XSS攻击面拓展
http://lorexxar.cn/2018/04/20/SW-xss/

TCTF/0CTF2018 h4x0rs.space Writeup
http://lorexxar.cn/2018/04/17/0ctf2018-space/

TCTF/0CTF2018 h4xors.club2 Writeup
http://lorexxar.cn/2018/04/10/0ctf2018-club2/

Weblogic 反序列化漏洞(CVE-2018-2628)漫谈
https://paper.seebug.org/584/

一行代码蒸发了¥6,447,277,680 人民币!
https://paper.seebug.org/582/

从 CVE-2016-0165 说起:分析、利用和检测(下)
https://paper.seebug.org/581/

【Web安全】渗透测试介绍|附实例
http://blog.nsfocus.net/web-sec-penetration-test/

【RSA 2018】内部安全威胁管控,用户个人信息保护之道
http://blog.nsfocus.net/rsa2018-inner-security/

【RSA2018】美国网络空间治理的图谋-从政府防护到全面防护
http://blog.nsfocus.net/rsa2018-csf/

Exim Off-by-one(CVE-2018-6789)漏洞复现分析
http://0x48.pw/2018/03/30/0x42/

SecWiki News 2018-04-24 Review
http://www.sec-wiki.com/?2018-04-24

SecWiki News 2018-04-23 Review
http://www.sec-wiki.com/?2018-04-23

SecWiki News 2018-04-22 Review
http://www.sec-wiki.com/?2018-04-22