1. CRLF 驱动的反同步攻击:斩首 HTTP 流 研究 | 2026-08-05 23:30 | portswigger.net | 原文 ↗ | #vulnerability-research | #attack-chains | #web-security
2. How I stole the identity of every Yahoo user 博客 | 2017-05-09 00:00 | samcurry.net | 原文 ↗ | #bug-bounty | #email-security | #spoofing