新鲜出炉的Top Ten Web Hacking Techniques of 2009

Jeremiah Grossman 一直有做这种收集的和评选工作，还是比较具有代表意义的。放眼望去，确实还都是些好文章。

原文：
~r/JeremiahGrossman/~3/2LGGL8bgrJI/top-ten-web-hacking-techniques-of-2009.html

Top Ten Web Hacking Techniques of 2009!

1. 
Alexander Sotirov, Marc Stevens, Jacob Appelbaum, Arjen Lenstra, David Molnar, Dag Arne Osvik, Benne de Weger

2. HTTP Parameter Pollution (HPP)
Luca Carettoni, Stefano diPaola 

3. 
Thai Duong and Juliano Rizzo

4. Cross-domain search timing
Chris Evans

5. Slowloris HTTP DoS
Robert Hansen, (additional credit for earlier discovery to Adrian Ilarion Ciobanu & Ivan Ristic - “Programming Model Attacks” section of Apache Securityfor describing the attack, but did not produce a tool)

6. 
Soroush Dalili

7. 
Stephen Sclafani

8. Our Favorite XSS Filters and how to Attack them
Eduardo Vela (sirdarckcat), David Lindsay (thornmaker)

9. RFC1918 Caching Security Issues
Robert Hansen

10. DNS Rebinding (3-part series Persistent Cookies, Scraping & Spamming, and Session Fixation)
Robert Hansen