2006-01-20 [paper] [WEB] Security Testing Demystified sec http://www.hackingspirits.com/eth-hac/papers/whitepapers.asp