Web vulnerability scanner getting start
Improving Application Security After An Incident Cory Scott Matasano Security.