Security Testing Resources

Web Application and Database Security

• Ross Anderson's Security Engineering Book
• PHP Bugs
• Packet Storm Security
• Security Focus
• Best practices for accepting user data
• Testing forData Validation
• Session Fixation Attack in PHP
• Overview of Attacks Against Web Apps
• SQL Injection by example
• SQL Injection Attacks-MySQL
• SQL Injection Attacks-MS SQL Server
• PHP Net on SQL Injection
• Cross Site Scripting FAQ

Windows Security Tools

• Fuzz Testing Tools
• More Fuzzers
• Fuzzer in Ruby
• ettercap
• Nessus
• NTOP
• Wire Shark (was Ethereal)

Computer Security Information

• Uninformed.org
• Phrack.org