Vulnerabilities Research Resources

The resources page is where you will find links to all sorts of useful things for your specialism. It’s updated regularly so check back again soon. All tools and guides mentioned in hands on activities will be linked from this page.

If you think we have missed something special - get in touch (account required) or alternatively email us at info@in2security.org.nz to send us a link and we will have a look.

The Art of Software Security Assessment (also known as TAOSS)
http://amzn.to/HM7YT7
Chapters 1 - 5

FreeRDP
http://www.freerdp.com/

CVSS homepage
http://www.first.org/cvss

Introduces the subject of DREAD
http://www.slideshare.net/chuckbt/stride-and-dread

Apache Chunked Encoding advisory
http://httpd.apache.org/info/security_bulletin_20020620.txt

Gobbles Apache-Scalp exploit
http://downloads.securityfocus.com/vulnerabilities/exploits/apache-scalp.c