【1】缺陷周話文章
《缺陷周話》第1期:空指針解引用:https://www.freebuf.com/articles/rookie/183889.html
《缺陷周話》第2期:SQL注入:https://www.freebuf.com/news/184732.html
《缺陷周話》第3期:內(nèi)存泄漏:https://www.freebuf.com/articles/rookie/185356.html
《缺陷周話》第4期:XML外部實(shí)體注入:https://www.freebuf.com/vuls/186054.html
《缺陷周話》第5期:越界訪問:https://www.freebuf.com/articles/rookie/186749.html
《缺陷周話》第6期:命令注入:http://www.freebuf.com/rookie/187316.html
《缺陷周話》第7期:緩沖區(qū)上溢:https://www.freebuf.com/articles/rookie/187891.html
【2】OWASP 攻擊系列大全(幾十篇文章)
https://www.andseclab.com/category/owasp/
AD攻防工作室
【3】OWASP ModSecurity CRS 3.0核心規(guī)則集詳解
http://f2ex.cn/modsecurity-crs-3-list/
【4】OWASP 滲透測試指南(OWASP Testing Guide v5
https://www.ddosi.com/b195/
【5】OSWAP安全體系建設(shè)
https://www.cnblogs.com/AtesetEnginner/p/11307747.html
【6】OWASP Top10 漏洞體系
https://www.cnblogs.com/shellr00t/p/6774267.html
【7】OWASP 報(bào)告
http://www.vipread.com/library/list/145
【8】OWASP安全測試--實(shí)戰(zhàn)類教程(Web安全系列課程)
https://ke.qq.com/course/394848
【9】靶機(jī)--15個(gè)漏洞測試網(wǎng)站
https://www.freebuf.com/news/69821.html
【10】滲透靶機(jī)匯總
https://zhuanlan.zhihu.com/p/146450417
【11】OWASP資源
OWASP下載
https://wiki.owasp.org/index.php/Category:OWASP_Download)
OWASP books
https://wiki.owasp.org/index.php/Category:OWASP_Books
OWASP測試項(xiàng)目
https://wiki.owasp.org/index.php/OWASP_Testing_Project