Sm4rt Security Services - Penetration Testing and Application Pen Tests in Canada, US and Mexico


Security Conferences
WebSec 2008 - Mexico City
WebSec 2007 - Mexico City
WebSec 2006 - Mexico City

Documents
Advanced SQL Injection
(Spanish) Como Prevenir el Fraude Digital
Rainbow Series Library
Security Focus Infocus

Security Related Tools and Exploits
Top 75 Network Security Tools
Hacking Exposed Tools  Windows
Security Focus Tools
Packet Storm Tools  Exploits
The Metasploit Project
Indianz Tools
FrSIRT - Exploits
Milw0rm Exploits
Securiteam Tools
Toolcrypt
Wi-Foo Wireless Tools
Security Forest

Vulnerabilities
SANS Top 20 Unix and Windows Vulnerabilities
OWASP Top 10 Web Application Vulnerabilities
CVE - Common Vulnerabilities and Exposures
OSVDB - The Open Source Vulnerability Database
Security Focus Vulnerabilities

Hardening
NSA / NIST Checklists / Implementation Guides
SANS S.C.O.R.E. Checklists
Center for Internet Security Benchmarks and Guides


Security Related Associations and Organizations
OWASP - Open Web Application Security Project
ISSA - Information Systems Security Association
ISO 17799 Standard
IPSA - International Professional Security Association
ISECOM - Institute for Security and Open Methodologies
PCI - Payment Card Industry Security Standard
BS - British Standard 7799
ISACA - Information Systems Audit and Control Association
Common Criteria
CERT - Computer Emergency Response Team
ENISA - European Network and Information Security Agency
SANS Institute
ISF - Information Security Forum
EPIC - Electronic Privacy Information Center

Resources
Jessland Enterprise Security Services