【Facebook】标记用户可以删除 Facebook 故事 https://mrkrhy-xyz.medium.com/tagged-user-could-delete-facebook-story-d7f9cdde92aa
GraphQL API 安全性测试入门指南 https://blog.forcesunseen.com/a-primer-for-testing-the-security-of-graphql-apis
CVE-2021–38646利用 https://medium.com/csg-govtech/all-your-d-base-are-belong-to-us-part-2-code-execution-in-microsoft-office-cve-2021-38646-fa6e70362162
GitLab CE CVE-2021-22205 在野利用 https://security.humanativaspa.it/gitlab-ce-cve-2021-22205-in-the-wild/
Hacking Xiaomi's android apps https://blog.takemyhand.xyz/2021/07/hacking-on-xiaomis-android-apps.html
