13/08/2015

• XSS Filter Evasion Cheat Sheet - OWASP : This article is focused on providing application security testing professionals with a guide to assist in Cross Site Scripting testing.
• Everything you need to know about HTTP security headers : This article explains what secure headers are and how to implement these headers in Rails, Django, Express.js, Go, Nginx, and Apache.
• domsnitch : A passive reconnaissance tool inside the DOM (experimental)
• API Security Checklist : Checklist of the most important security countermeasures when designing, testing, and releasing your API.
• Inj3ct0r 1337day.com : Exploit database separated by exploit type (local, remote, DoS, Poc, etc.)