Good Reads

Secure Development

• Best Practices for Secure Web Development

Pen Testers

• Attacking AJAX Applications
• Hacking 432: A Discussion of Advanced Techniques
• Our Favorite XSS Filters/IDS and how to Attack Them
• Web 2.0 Assessment Tool Evaluation
• Web Application Scanners: Definitions and Functions

Other

• Introduction to HTML 5
• OWASP Top 10 - 2010
• Web Server Botnets and Server Farms as Attack Platforms

Syhunt

• Syhunt Hybrid Datasheet
• Syhunt Dynamic & Sandcat for PHP Datasheet
• Syhunt Testimonials
• What's New in Syhunt
• List of Known Vulnerability Checks in Syhunt
• Success Cases

Syhunt Code for PHP

• PHP Threats
• CMS Research Project

Vulnerabilities

• NoSQL & SSJS Injection
• PHP RFI: Old Attack, Common #FAIL
• Things that go bump on the web