Nagios Core 代码执行漏洞(CVE-2016-9565)分析
http://paper.seebug.org/146/

ASERT-Threat-Intelligence-Report-2016-06-Ransomware-Server-Analysis
https://www.arbornetworks.com/blog/asert/wp-content/uploads/2016/12/ASERT-Threat-Intelligence-Report-2016-06-Ransomware-Server-Analysis.pdf

手把手教你DIY一个DNS/HTTP带外查询工具
http://das.scusec.org/2016/09/13/dns-http-search/

[Web安全]浅谈json参数解析对waf绕过的影响
https://xianzhi.aliyun.com/forum/read/553.html