Home Documents Projects Unsorted Archive Links Files

A bunch of links, listed in no particular order.
News, opinions and rants
http://www.poe-news.com/ News stories from around the world!
Security (in general)
http://www.lightbluetouchpaper.org/ University of Cambridge security research blog.
http://www.insecure.org/ Fyodor's site. Home of 'nmap' and more.
http://www.rootkit.com/ Greg Hoglund's blog. There's usually a good WoW rant here.
http://www.ngssoftware.com/ Mark, Dave, Daf and more.
http://www.databasesecurity.com/ David Litchfield's site dedicated to various flavours of databases.
http://cve.mitre.org/ Common Vulnerabilities and Exposures. Public security vulnerability database, sorry, dictionary. The first one of its kind, I think?
http://nvd.nist.gov/ The National Vulnerability Database. A CVE with government backing.
http://www.secunia.com/ Secunia. Another site that offers a vulnerability database and mailing lists.
http://www.securityfocus.com/ Securityfocus. BUGTRAQ and so forth.
Security (web application specific)
http://ferruh.mavituna.com/makale/sql-injection-cheatsheet/ A comprehensive list of various SQL injection methods for various databases.
http://ha.ckers.org/ A regularly updated place with mostly web application specific security commentary (they have a pretty decent JavaScript XSS reference too).
http://www.gnucitizen.org/ PDP Architect's site.
http://www.owasp.org/ Start reading here first for testing methodologies and training material?
http://www.portswigger.net/ Home of Burp, the intercepting proxy.
http://www.parosproxy.org/ Paros, another well-known intercepting proxy.
Friends
Unsorted
http://www.packetfactory.net/ Mike "don't forget the D" Schiffman's packet factory. Home to libnet and more!